Lightning Network Hit by Critical Exploit
A recent exploit has targeted Bitcoin's Lightning Network, compromising merchant nodes that handle BTC payments. The attack exploited a vulnerability in LND software, allowing unauthenticated remote attackers to obtain credentials that grant permission to interact with an LND node.
The team behind BTCPay Server confirmed the attacks and advised users to update their LND software to version 2.4.2 or take their server offline immediately. This move comes after a critical vulnerability was reported by the Bitcoin Red Team, which had already alerted BTCPay to the issue.
Several victims have come forward, including Foundation, a hardware-wallet maker that lost funds from its BTCPay Lightning node overnight. Citadel21, a bitcoin publication, also reported being swept, but with minimal losses.