Hackers Exploit BTCPay Server Flaw to Steal Bitcoin and Litecoin From Hot Wallets

Hackers have exploited a critical vulnerability in BTCPay Server versions 2.4.1 and earlier to steal Bitcoin and Litecoin from hot wallets by obtaining .macaroon credential files used to control LND nodes. The vulnerability allows unauthenticated remote attackers to access sensitive authentication files, enabling fund theft. BTCPay Server recommends users upgrade to version 2.4.7 or later, move funds to new wallets, and treat compromised systems as fully compromised. Two cryptocurrency wallet addresses linked to the attacks have been disclosed.

AI-extracted · verify before operational use