$BTC BTCPay Server macaroon flaw drains Lightning nodes at Foundation and Citadel21

There is a critical vulnerability being actively exploited on BTCPay Server, which can result in the loss of funds," the project posted at 11:51 a.m.

By the time that warning went live, attackers had already swept Lightning nodes belonging to Foundation, the hardware wallet manufacturer, and Citadel21, the Bitcoin zine run by pseudonymous commentator hodlonaut.

Foundation chief executive Zach Herbert confirmed the breach at 2:01 p.m. ET: "How many BTCPay lightning nodes were swept?

hodlonaut reported the same pattern: "This is an ongoing attack on BTCPayserver users. Citadel21's lightning node was just swept. Fortunately there were not much funds there." At least one other operator described identical channel closures and drained balances in reply threads.

Watch $BTC for the next session - if this move holds, it changes the read.

$BTC #BTC #CryptoSecurity #CryptoNews