Lightning Nodes Drained As BTCPay Server Users Race To Patch
Attackers drained Lightning nodes from BTCPay Server users, including Foundation and Citadel21, before the public alert; BTCPay says the exploited flaw is not the one disclosed in its changelog.
Lightning nodes are being drained as BTCPay Server users race to patch a vulnerability. Hardware wallet maker Foundation and Bitcoin zine Citadel21 reported their nodes were swept, in some cases hours before the project’s public alert. BTCPay clarified that the flaw under active attack is not the one disclosed in its changelog.