Bitcoin Lightning Nodes Drained as Attackers Exploit BTCPay Vulnerability

Attackers exploited a BTCPay vulnerability to drain Bitcoin Lightning nodes by accessing LND credential files in versions before 2.4.2. At least two operators reported their Lightning channels emptied before a public warning was issued. The flaw exposed private keys, enabling attackers to steal funds from affected nodes. Node operators are urged to update immediately.