Bitcoin Payment Tool BTCPay Urges Update After Attackers Steal Funds

2026-8-9 13:40

BTCPay Server confirmed that attackers exploited a critical flaw to steal funds from users running any version prior to 2.4.2 and urged operators to update immediately.

The self-hosted Bitcoin payment processor released version 2.4.2 to close the vulnerability. The issue allowed an unauthenticated remote attacker to obtain .macaroon credential files for LND, a common Lightning Network implementation.

What BTCPay Server Users Must Do

The stolen credentials could hand an attacker full control of an LND node. From there, the attacker could move funds directly out of the node.

“We have confirmed that attackers exploited this vulnerability. Users were affected and funds were stolen. We are not publishing technical details yet because operators still need time to update,” the team said.

Follow us on X to get the latest news as it happens

There is a critical vulnerability being actively exploited on BTCPay Server, which can result in the loss of funds.

Please update your BTCPayServer to 2.4.2 by going to Admin Dashboard -> Server -> Maintenance -> Update & verify the 2.4.2 version string in the footer.

If you…

— BTCPay Server (@BtcpayServer) August 7, 2026

The risk applies specifically to deployments using LND. Other Lightning setups and non-Lightning users face no credential exposure, though the project still urged them to update. BTCPay Server’s own on-chain and hot wallets remain unaffected.

Operators who use LND should update to version 2.4.2 and LND 0.21.1 through the maintenance dashboard. The update regenerates macaroons automatically. Those unable to patch immediately were told to take their servers offline.

The project also advised LND users to review node activity for unfamiliar peers, unexpected channel closures, and payments they did not make.

A Second Blow to Bitcoin Self-Custody

The disclosure follows another major security incident. Galaxy Research confirmed on Friday that 1,719 Bitcoin (BTC), worth roughly $111 million, has been stolen from Coldcard users so far. The firm expects total losses to exceed $130 million once outstanding cases are verified.

$111 MILLION CONFIRMED STOLEN SO FAR IN COLDCARD EXPLOIT

Thanks to victim reports, we can confirm with high confidence that 1719 BTC has been stolen from Coldcard victims so far

We have many more coins we are vetting for confirmation – we think total losses likely exceed $130m pic.twitter.com/pLfiMQZFyX

— Galaxy Research (@glxyresearch) August 7, 2026

Neither incident touched the Bitcoin protocol itself. Both instead exposed weaknesses in the tools built around it. 

Subscribe to our YouTube channel to watch leaders and journalists provide expert insights

The post Bitcoin Payment Tool BTCPay Urges Update After Attackers Steal Funds appeared first on BeInCrypto.

origin »

Bitcoin price in Telegram @btc_price_every_hour

Render Payment (RPM) на Currencies.ru

$ 0 (+0.00%)
Объем 24H $0
Изменеия 24h: 0.00 %, 7d: 0.00 %
Cегодня L: $0 - H: $0
Капитализация $0 Rank 99999
Доступно / Всего 0 RPM

steal bitcoin attackers version funds payment update

Источник: beincrypto.com

steal bitcoin → Результатов: 126


Фото:

Financial Analyst: Bitcoin Futures Are A Great Buy At $8,500

Crypto analyst John Kolovos recently told Bloomberg TV that Bitcoin price will drop to $8,500 before sharply rebounding. 4-Digit Bitcoin Price Is A Steal Earlier this week Macro Risk Advisors chief technical analyst John Kolovos spoke with Bloomberg TV about Bitcoin price action and the recent Congressional and Senate hearings over Facebook’s Libra cryptocurrency.

2019-7-20 09:37


Crypto Twitter Scam Bots Re-Enter The Market Once Again Due To The Larger Interest in Bitcoin

Scammers are trying to steal users’ funds by promoting fake giveaways This is a similar strategy as the one used in 2017 by many scammers As the cryptocurrency market continues to expand, it seems that new scammers are trying to take advantage of the renewed interest in Bitcoin (BTC) and other virtual currencies. One of […]

2019-7-15 17:24


Collective Hacker’s Honeypot Now More Than Satoshi’s Bitcoin Holdings with Over 1 Million BTC Stolen

Hackers have Stolen over 1 million of the 21 Million Bitcoins that will ever Exist Since 2011, hackers have been out to steal Bitcoins from those who own it especially on exchanges. According to data from Chainanalysis, over a billion dollars were stolen through hacks on exchanges alone. It is estimated that Satoshi Nakamoto has […]

2019-5-26 17:00


This Latest ‘Who Created Bitcoin’ Theory is The Craziest One Yet

Bitcoin was the creation of a programmer and drug lord who wanted to launder money, and Craig Wright is trying to steal his private keys. Bitcoin Creator, Solotshi Nakamoto? That was the latest wild conclusion to emerge in the debate over who the ‘real’ inventor of Bitcoin is – the entity behind the Satoshi Nakamoto pseudonym – as Wright’s multibillion-dollar court case continues.

2019-5-14 01:00


Why is ETH still bearish after Amazon and Elon Musk endorsement?

After all eyes were on Bitcoin and its recent movements to pick up from the bottom and back into bullish areas, it’s time for Ethereum to steal the show. It’s too early to tell if the same movement can be replicated by ETH but with names like Elon Musk and Amazon behind the scenes, we […] The post Why is ETH still bearish after Amazon and Elon Musk endorsement? appeared first on AMBCrypto.

2019-5-13 19:00


Did the $41M Bitcoin Theft Create a Buying Opportunity for Binance Coin (BNB)?

Binance Token (BNB) has taken a significant due to the Binance Bitcoin hack but is the recent pullback an opportunity for buyers? BNB Maybe a Steal as Binance Reels Since topping out at $25. 49 Binance Token (BNB) has pulled back by nearly 27% and the fallout from last week’s Tether – Bitfinex scandal along with Binance’s recent $41 million bitcoin theft are taking their toll on the exchange’s native token.

2019-5-11 01:00


Binance CEO Reveals New Details of ‘Damaging’ $44 Million Bitcoin Hack

By CCN: On May 10, Changpeng Zhao, the CEO of Binance, the world’s largest crypto exchange, released a security incident update regarding the firm’s loss of 7,000 bitcoin. Following the high-profile security breach of the exchange during which sophisticated tools and methods were used to steal $44 million from Binance, the firm swiftly revamped its security measures and practices.

2019-5-10 13:00


Bitcoin Price: Mark Yusko’s $400,000 Target is Bold – But Not Insane

By CCN: Morgan Creek Capital Management founder Mark Yusko spoke to Bloxlive. tv about the Binance hack and his startling prediction that Bitcoin will eventually be worth $400,000. Morgan Creek Founder: Hackers Prove the Value of Crypto Yusko made a compelling case, taking a positive out of the massive $40 million loss that Binance suffered, saying that hackers prove the value of Bitcoin.

2019-5-10 21:52


Фото:

Behind the scenes: Electrum hackers steal $4M with Bitcoin phishing attacks

Electrum Bitcoin wallet users have lost 771 BTC (approximately $4 million) since late December 2018, in an ongoing series of targeted phishing attacks. According to research released by Malwarebytes Labs, fraudsters were able to trick unsuspecting users into downloading a malicious version of the wallet by exploiting a weakness in the software.

2019-4-16 18:02


[Gone Phishing] Bitcoin Hacker Manages to Steal Roughly 10K Passwords, $365,000 from Dark Web Users

Blockchain and cryptocurrency related crimes are something heard about in a very scarce quantity. But this week, TheNextWeb uncovered the sentencing of a 37-year-old man from in the United States under charges of fraud and cybercrime, for which he was sentenced to one year and one day in prison. Where this relates to Bitcoin is […]

2019-4-10 21:32


Фото:

Bitcoin wallet Electrum hit by DoS attack from 140,000-strong botnet

The servers of popular Bitcoin wallet Electrum are under heavy attack, and users are advised to be extra careful when using the platform until it’s resolved. A sophisticated botnet of more than 140,000 machines has launched Denial-of-Service (DoS) attacks on Electrum‘s servers, with apparent intent to direct users to compromised versions of the software designed to steal their Bitcoin.

2019-4-8 18:06


дальше еще 77 новостей →

Партнеры Currencies.ru



Реклама на Currencies.ru

Самое свежее на Currencies.ru

AI Agent Faked Identities to Push Malicious Code During Cyber Test, AISI Finds

The UK AI Security Institute (AISI) disclosed that an AI agent, built on Anthropic’s Mythos 5, autonomously ran a social engineering attack during cyber testing. The agent opened a pull request containing malicious code on a real open-source project and created fake identities to win a maintainer’s approval.