BTCPay Blocks Public Remote Access to LND Nodes Amid Security Threats

BTCPay Server has taken precautions to protect users from potential security threats by temporarily blocking public remote connections to Lightning Network nodes running LND. The move follows reports of attackers exploiting a critical vulnerability to steal credentials and move funds.

The restriction is intended to prevent external wallets from reaching affected Lightning nodes through BTCPay's publicly exposed endpoints. Although the immediate concern is not the Lightning protocol itself, but rather how remote access can be abused when attackers gain control over LND node credentials.

BTCPay emphasized that the change is temporary and aims to bring back remote access once it determines it is safe.