CapitMonet on Nostr: BTCPay Server just had a serious security incident. A critical vulnerability ...
BTCPay Server just had a serious security incident.
A critical vulnerability affecting BTCPay deployments using LND was actively exploited, exposing LND macaroons and resulting in confirmed theft of funds.
This was not a Bitcoin or Lightning protocol failure.
It was a reminder of something more fundamental:
Self-custody removes trusted intermediaries.
It does not remove operational risk.
Every additional service connected to your node expands the attack surface.
BTCPay has released v2.4.2. If you run BTCPay — especially with LND — update immediately.
Sovereignty requires security.
# BTC #BTCPay #LND #Lightning
Published at
2026-08-08 19:28:04 UTCEvent JSON
{
"id": "95c4e6e5db7207fe68259838cd921140f60ae2eeb5b246f41ec22686e4621afb",
"pubkey": "a008d14dd9d23f1953c0e426f31d7cda926fa2c45c5fc68c22d2f0b9a06a50ac",
"created_at": 1786217284,
"kind": 1,
"tags": [
[
"t",
"BTCPay"
],
[
"t",
"btcpay"
],
[
"t",
"LND"
],
[
"t",
"lnd"
],
[
"t",
"Lightning"
],
[
"t",
"lightning"
],
[
"client",
"Amethyst"
]
],
"content": "BTCPay Server just had a serious security incident.\n\nA critical vulnerability affecting BTCPay deployments using LND was actively exploited, exposing LND macaroons and resulting in confirmed theft of funds.\n\nThis was not a Bitcoin or Lightning protocol failure.\n\nIt was a reminder of something more fundamental:\n\nSelf-custody removes trusted intermediaries.\nIt does not remove operational risk.\n\nEvery additional service connected to your node expands the attack surface.\n\nBTCPay has released v2.4.2. If you run BTCPay — especially with LND — update immediately.\n\nSovereignty requires security.\n\n# BTC #BTCPay #LND #Lightning",
"sig": "109f36181488a64b15b73b71c3d3b6b65889fa18cb4b9a73284dddb8ce0b9cf21197ac386398917b8313072c4b965760f4f978d498e8ef6b61203fc60ecd5ed1"
}
