Blink Wallet, a Bitcoin Lightning Network payments application, suspended all operations on September 19, 2026. This decision followed the discovery of unauthorized access to a limited subset of custodial accounts, which resulted in the withdrawal of funds by an attacker.
The company confirmed that the breach was restricted to custodial accounts where Blink manages private keys on behalf of users. Non-custodial wallets, which utilize the Spark protocol introduced in mid-2026, were not affected by the incident.
Blink has deployed an emergency patch to address the vulnerability and is currently conducting an investigation to determine the exact cause of the breach. The company stated that its multisig cold storage infrastructure helped limit the impact, and the majority of user funds remain secure.
The incident occurred while Blink was in the process of winding down custodial services in certain regions due to regulatory requirements. Users had been instructed to migrate their funds by deadlines in August and September 2026.
