Critical Security Vulnerability in BTCPay Server: 3 Bitcoin Reward Offered for Stolen Funds

BTCPay Server supporters are offering a reward worth 3 Bitcoin (BTC) for the return of funds stolen following a critical security vulnerability on the platform.

The open-source Bitcoin payment processor BTCPay Server was recently shaken by a serious, actively exploited security vulnerability. The platform’s supporters announced they would offer 10% of the recovered amount as a reward, up to a maximum total of 3 Bitcoin (BTC), to facilitate the return of funds seized by attackers.

The vulnerability in question affects all versions of BTCPay Server prior to version 2.4.2. This flaw allowed attackers to access files known as LND admin macaroons, which function as digital authentication keys. The compromise of these keys gave attackers full control over the connected Lightning Network wallets and nodes. The team has urgently warned users to upgrade their servers to the latest version.

Artificial Intelligence Increases the Power of Cyberattacks

The BTCPay team points out that artificial intelligence may have played a role in discovering such complex vulnerabilities. With the advancement of AI models, identifying weak points in massive codebases has reportedly become much faster and cheaper. Bitcoin projects, in particular, can be more vulnerable to these next-generation threats as they are high-value targets.

Cyberattackers’ intensive efforts and their search through complex code directories make the security of digital assets more critical than ever. Occurring amidst price chart fluctuations, such attacks—along with similar incidents like those involving hardware wallets like Coldcard that led to $116 million in losses—are triggering security concerns within the industry. The BTCPay Server Foundation aims to make security processes more resilient by donating a total of 0.42 Bitcoin (BTC) to the researchers who reported the vulnerability.