BTCPay Server Patches Critical LND Credential Bug After Lightning Wallet Drain

BTCPay Server has released version 2.4.2 to patch a critical vulnerability that allowed unauthenticated remote access to LND credential files, after attackers used the issue to drain merchant Lightning wallets. The project’s release notes describe a serious bug involving .macaroon files, which are used by LND to manage access permissions. In plain English, those files… Continue reading BTCPay Server Patches Critical LND Credential Bug After Lightning Wallet Drain