# Lightning Invoice Requests

**URL:** <https://community.umbrel.com/t/lightning-invoice-requests/6171>\
**Category:** Bitcoin and Lightning\
**Created:** [February 5, 2022, 1:20am UTC](https://community.umbrel.com/t/lightning-invoice-requests/6171 "2022-02-05T01:20:58Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![ClarionChain](https://avatars.discourse-cdn.com/v4/letter/c/3da27b/32.png) [@ClarionChain](https://community.umbrel.com/u/ClarionChain)\
**Post date:** [February 5, 2022, 1:20am UTC](https://community.umbrel.com/t/lightning-invoice-requests/6171/1 "2022-02-05T01:20:58Z")

</div>

After upgrading Umbrel to latest I see 4 lightning invoice requests for 100m sats each were created with 24 hour expire.

I did not create these. No one has the login credentials to my node.

I don’t believe anyone has accessed the node directly…

What can I do to understand this and troubleshoot better? I don’t see a “to address” or “receive address”…

Any help would be appreciated.

---

<div class="post-metadata">

**Author:** ![DHD](https://yyz2.discourse-cdn.com/flex030/user_avatar/community.umbrel.com/dhd/32/485_2.png) [@DHD](https://community.umbrel.com/u/DHD)\
**Post date:** [February 5, 2022, 6:01am UTC](https://community.umbrel.com/t/lightning-invoice-requests/6171/2 "2022-02-05T06:01:47Z")

</div>

That is the app Satsale doing an internal test to see if it’s working properly. Your sats are safe – I can understand where you’re coming from, I’d freak out as well if my sats were “taken” out without my consent.

---

<div class="post-metadata">

**Author:** ![russell.ess](https://yyz2.discourse-cdn.com/flex030/user_avatar/community.umbrel.com/russell.ess/32/246_2.png) [@russell.ess](https://community.umbrel.com/u/russell.ess)\
**Post date:** [February 6, 2022, 2:44pm UTC](https://community.umbrel.com/t/lightning-invoice-requests/6171/3 "2022-02-06T14:44:57Z")

</div>

Thanks for this reply - I wondered what the heck was going on (not the OP).

---

<div class="post-metadata">

**Author:** ![ClarionChain](https://avatars.discourse-cdn.com/v4/letter/c/3da27b/32.png) [@ClarionChain](https://community.umbrel.com/u/ClarionChain)\
**Post date:** [February 6, 2022, 2:59pm UTC](https://community.umbrel.com/t/lightning-invoice-requests/6171/4 "2022-02-06T14:59:39Z")

</div>

thx for the reply. I figured that out as well.

Also…f that. not cool. they should not be doing that and who/how does that app even have permission to do that.

I’m deleting all apps from my umbrel routing node.

security is an issue, some apps you can’t change the. password. Disappointed.