BTCPay backers offer Bitcoin bounty to recover funds stolen via LND wallet compromise.

Security & Exploits · 2026-08-11

BTCPay Server supporters are offering a bounty of up to 3 BTC (currently worth around $190,000) equal to 10% of recovered funds to incentivize the return of Bitcoin stolen through a recent exploit involving compromised LND wallet credentials. Attackers obtained Lightning Network admin macaroons that granted control over connected wallets, though BTCPay has not disclosed the total amount stolen or number of affected users. The project urged users to update to version 2.4.2 immediately and said the bounty extends to anyone providing information to recover the funds, including the attacker.

Previously on Telem

BTCPay Server issues emergency advisory for actively exploited LND vulnerability 2026-08-11
BTCPay vulnerability exposes Lightning node credentials, drains merchant wallets 2026-08-08
BTCPay Server warns of actively exploited vulnerability affecting funds 2026-08-07