BTCPay Server temporarily restricts public remote LND node access due to security vulnerability.

iconKuCoinFlash
Share
This is the logo of the coin.
BTC
$64,652.000.53%
AI summary iconSummary
BTCPay Server has temporarily blocked public remote access to LND nodes due to a critical blockchain security vulnerability that exposed credentials and allowed attackers to drain funds. This action affects external wallets such as Zeus using BTCPay Server domains or Docker Tor onion addresses, but Lightning transactions continue to function normally. Remote access will be restored once the fix is confirmed. Version 2.4.2 will install LND 0.21.1 and reset macaroon keys. The Foundation and Citadel21 reported drained node funds, but the Foundation stated its hot wallet remained secure. No official figures on affected users or financial losses have been released.

Odaily Planet Daily reports that BTCPay Server, a Bitcoin payment processing service, has temporarily restricted public remote access to Lightning Network nodes running the Lightning Network Daemon (LND) software. Attackers exploited a critical vulnerability to obtain credentials and transfer funds; the number of affected operators and the total amount stolen have not been disclosed.

This restriction affects external wallets like Zeus that connect via the BTCPay Server domain or Tor onion addresses in Docker deployments, but Lightning Network payments will continue to work. BTCPay Server states that remote access will be restored once security is confirmed.

BTCPay Server 2.4.2 will install LND 0.21.1 and automatically regenerate macaroon credentials during a standard installation. The Foundation and Citadel21 separately disclosed that their Lightning Network node funds were drained; the Foundation stated that its hot wallet was unaffected, but neither party disclosed the specific amount of losses.

Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information. Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.