Attackers obtained credentials that can control connected Lightning wallets and move funds out of them.
BTCPay told affected operators to update immediately and rotate any credentials that may have leaked.
Operators who can't patch right away are told to take the server offline until it's updated.
This targets payment-processor infrastructure, not Bitcoin's protocol or on-chain cold storage.
Update BTCPay Server now, rotate node credentials, and watch channel balances closely after patching.
Read More →