BTCPay Server Hit by Hackers, Up to Three BTC Bounty Offered

BTCPay Server has been hit by a vulnerability that allowed hackers to extract Lightning Network admin macaroon credentials from affected instances.

The project's supporters have pledged up to three Bitcoins as a bounty for the recovery of stolen funds, offering 10% of whatever is recovered, capped at three coins in the event of a full recovery.

BTCPay Server extended an offer to the attacker directly alongside anyone else holding actionable information, directing them to a dedicated security address and offering Signal or other encrypted channels on request.