BTCPay Offers $190,000 Bounty for Recovering Stolen Bitcoin

BTCPay Server has announced that it is offering up to $190,000 in bounties to help recover Bitcoin stolen in a recent security exploit. The company said it will pay 10% of recovered losses to anyone who provides useful information about the attacker and their whereabouts. If multiple tips contribute to the recovery, the reward will be split based on the size of the losses and the value of the information.

The incident began last week when attackers exploited a vulnerability in BTCPay Server and stole credentials for LND software, which is used to operate Lightning Network nodes. This allowed them to drain connected wallets, resulting in significant losses for some users, including Foundation and Citadel21. BTCPay has separately paid 0.21 BTC each to developer Craig Raw and the Bitcoin Red Team Fund for discovering and responsibly disclosing the vulnerability.

Exchanges, blockchain analytics firms, and law enforcement agencies are cooperating with BTCPay to track down the stolen funds. The company is urging victims to report the theft to local police and any service where the funds have been traced. It also recommends storing funds in cold storage and regularly moving balances out of hot wallets.