Basis and Citadel21 reported drained Lightning nodes, however the whole quantity stolen and variety of affected operators stay unknown.
BTCPay Server has quickly restricted public distant connections to Lightning Community nodes working Lightning Community Daemon (LND) software program after attackers exploited a essential vulnerability to acquire credentials and transfer funds.
BTCPay stated the restriction prevents exterior wallets equivalent to Zeus from connecting by a BTCPay Server area or Tor onion deal with on Docker deployments. BTCPay stated Lightning funds can proceed and that it plans to revive the remote-access possibility when it considers it secure.
Model 2.4.2 installs LND model 0.21.1 and robotically regenerates the macaroon credentials on customary BTCPay installations. The challenge suggested operators to verify for unauthorized funds, sudden channel closures, unfamiliar friends and discrepancies of their onchain or Lightning balances.
Learn extra