⚡️ Vulnerability in BTCPay Server leads to Lightning node funds leak
Attackers exploited a critical vulnerability in BTCPay Server to steal funds from Lightning nodes running on top of LND.
The vulnerability provided access to node credential files, enabling attackers to seize control and withdraw funds from channels. BTCPay’s on-chain wallets were not affected—only LND deployments were hit.
The flaw was discovered by members of the Bitcoin Red Team, who this week began mass scanning for vulnerabilities in Bitcoin projects using artificial intelligence.
Attackers exploited a critical vulnerability in BTCPay Server to steal funds from Lightning nodes running on top of LND.
The vulnerability provided access to node credential files, enabling attackers to seize control and withdraw funds from channels. BTCPay’s on-chain wallets were not affected—only LND deployments were hit.
The flaw was discovered by members of the Bitcoin Red Team, who this week began mass scanning for vulnerabilities in Bitcoin projects using artificial intelligence.