BTCPay Blocks Remote Access After Attackers Drain Funds via LND Vulnerability

BTCPay Server has temporarily restricted public remote connections to Lightning Network nodes running LND software after attackers exploited a critical vulnerability to obtain credentials and move funds.

BTCPay said the restriction prevents external wallets such as Zeus from connecting through a BTCPay Server domain or Tor onion address on Docker deployments. This will ensure that users can continue making Lightning payments, but external access is restricted for now.

The project advised operators to check for unauthorized payments, unexpected channel closures, unfamiliar peers, and discrepancies in their onchain or Lightning balances.