BTCPay told users running LND to update immediately or take servers offline after attackers stole credentials that can control Lightning wallets and move funds.
- Attackers exploited a critical vulnerability in BTCPay Server to steal funds from Lightning nodes running LND, prompting urgent calls to update to version 2.4.2 or take servers offline.
- The flaw allowed unauthenticated access to LND “.macaroon” credential files, enabling attackers to seize control of affected Lightning nodes and drain their channels, though BTCPay’s standard on-chain wallets were not impacted.
- Victims including hardware-wallet maker Foundation and bitcoin publication Citadel21 reported their Lightning nodes were swept, as BTCPay and the Bitcoin Red Team investigate and prepare a full postmortem on the incident.
- 1 Payments firm OpenPayd targets year-end Nasdaq listing to fund U.S. expansion and acquisitions 5 hours ago
- 2 Crypto job postings triple to over 1,200 in September, but applications fall 5 hours ago
- 3 Cathie Wood says smart investors need to start watching where AI agents spend money 6 hours ago
- 4 Crypto's Sisyphean struggle 8 hours ago
- 5 BlackRock offers a glimpse of how tokenization may change your investment portfolio 8 hours ago
- 6 Bank group sues U.S. regulator over granting crypto trust charters 1 day ago
- 7 BNY in talks with Kraken parent Payward over infrastructure partnership 1 day ago
- 8 Once a $2 billion Ethereum layer-2, Blast is shutting down after assets plunge 98% 1 day ago
- 9 Trump’s potential AI czar, Jay Clayton, helped pioneer the SEC’s crypto crackdown 1 day ago
- 10 America at a crossroads: Commissioner Peirce’s parting challenge 1 day ago
The Definitive Stablecoin Landscape Series: Asia Pacific
As stablecoins move into regulated finance, APAC is becoming a key proving ground. This report maps the region’s rules, use cases, and RLUSD’s role.
Why it matters :
As stablecoins move into regulated finance, APAC is becoming a key proving ground. This report maps the region’s rules, use cases, and RLUSD’s role.
Once a $2 billion Ethereum layer-2, Blast is shutting down after assets plunge 98%
Live updates: Bitcoin reverses big early gains following soft U.S. jobs data
Tether's USDT is 'coming home' to Bitcoin after more than a decade
Payments firm OpenPayd targets year-end Nasdaq listing to fund U.S. expansion and acquisitions
Crypto job postings triple to over 1,200 in September, but applications fall
Cathie Wood says smart investors need to start watching where AI agents spend money
Original sourceCoinDesk
The original source remains the canonical version for attribution, rights, and later updates.
Read original ↗Disclaimer: This article is for information only and does not constitute investment advice. Digital assets involve substantial risk.
← Back to latest