Lightning Nodes Drained in Active BTCPay Server Exploit

Hackers drained Lightning network nodes belonging to multiple BTCPay Server users on Friday. The victims included a node operated by hardware wallet maker Foundation. Attackers struck quickly after reports emerged that a critical vulnerability was actively targeted in the wild.

BTCPay Server issued an urgent warning to merchants, urging them to update their software immediately to version 2.4.2 to stop the bleeding. The self hosted payment processor is popular among businesses that want to accept Bitcoin directly without relying on third party services, making node security a top priority for store owners.

Traders and node operators should check their systems right away to confirm they are running the latest patched version. The incident highlights the ongoing risks of self hosted infrastructure when zero day exploits hit the market, and the community is watching closely to see if further attacks surface over the weekend.