BTCPay Server, a bitcoin payment processing service, has temporarily disabled public remote connections to Lightning Network nodes running Lightning Network Daemon (LND) software. A severe vulnerability was exploited by attackers to obtain credentials and transfer funds, although the total number of affected operators and the amount stolen have not been made public. The restriction affects external wallets such as Zeus that connect via BTCPay Server's domain or Tor onion addresses in Docker deployments, but Lightning payments remain operational. BTCPay Server stated that remote access will be restored once security is confirmed. The upcoming BTCPay Server 2.4.2 release will bundle LND 0.21.1 and automatically regenerate macaroon credentials during standard installation. In separate disclosures, Foundation and Citadel21 both said their Lightning Network node funds had been swept clean, with Foundation confirming its hot wallet was unaffected. Specific loss figures were not disclosed.
BTCPay Server, a bitcoin payment processing service, has temporarily restricted public remote connections to Lightning Network nodes running Lightning Network Daemon (LND) software. Attackers exploited a severe vulnerability to obtain credentials and move funds, though the number of affected operators and the total amount stolen have not been disclosed.
The restriction affects external wallets such as Zeus that connect via BTCPay Server's domain or Tor onion addresses in Docker deployments, but Lightning Network payments continue to work. BTCPay Server said remote access will be restored once security is confirmed.
In a version update, BTCPay Server 2.4.2 will ship with LND 0.21.1 and automatically regenerate macaroon credentials during standard installations to further protect user funds.
Separately, Foundation and Citadel21 each disclosed that their Lightning Network node funds had been swept. Foundation said its hot wallet was not affected. Specific loss amounts were not disclosed.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
