Isolation is key for security. If you build a Lightning-enabled app, you don't want to grant it access to all funds on your node.

Use LNbits as an intermediate layer for security to give your app its own wallet. Whatever could go wrong with it, only its own wallet is at risk.

Reply to this note

Please Login to reply.

Discussion

is it like lndhub?

#lnbits is an essential layer for our lightning goat feeder. Thank you to all the devs for creating such a useful set of tools.

With respect, lnbits doesn't strike me as a good isolation layer considering its complexity, low developer count and past critical security vulnerabilities.

Just issue restricted macaroons. Yes, LND is not great but implementations without fine-grained access control are worse.

And don't forget Murphy's law, whatever can go wrong, will go wrong.