Checking conditions…

BTCPay Offers 3 BTC Bounty Following Lightning Server Exploit

BTCPay Server Sets $190k Reward to Recover Stolen Merchant Funds

By The Reviser DeskPublished Aug 11, 2026, 6:19 AMUpdated Aug 11, 2026, 6:32 AM1 min read
BTCPay Offers 3 BTC Bounty Following Lightning Server Exploit

BTCPAY SERVER HACKED

Illustration concept: A sleek digital server room with orange glowing bitcoin circuit lines, showing a secure network interface with glowing warning indicators, high resolution render.

AI summary

Open-source bitcoin payment processor BTCPay Server is offering up to 3 BTC to recover funds lost in a recent security exploit. The breach occurred last week after attackers compromised LND credentials to drain merchants' Lightning Network wallets.

Why this matters

Lightning Network integration is critical for fast, low-cost bitcoin transactions for merchants worldwide. Security compromises targeting node credentials undermine trust in self-hosted payment infrastructure, highlighting the persistent operational risks associated with active hot wallets.

Key takeaways

  • BTCPay Server is offering a bounty capped at 3 BTC (worth roughly $190,000) for recovered funds.
  • The breach occurred last week after attackers compromised Lightning Network Daemon (LND) credentials.
  • Perpetrators targeted and drained funds directly from merchant Lightning wallets.
  • The recovery reward pays out 10% of retrieved assets up to the 3 BTC ceiling.

BTCPay Server is attempting to claw back funds stolen during a cyberattack last week by placing a substantial bounty on the drained assets. According to CoinDesk, the open-source payment processor announced it will reward anyone who helps retrieve the missing cryptocurrency.

The project confirmed that hackers gained unauthorized access to Lightning Network Daemon (LND) credentials. Armed with these credentials, the perpetrators managed to siphon funds directly from merchant hot wallets integrated with the platform.

To incentivize the return of the stolen digital assets, BTCPay Server disclosed that it will allocate 10% of any recovered funds to individuals who assist in their recovery. The payout is capped at 3 BTC, an amount valued at approximately $190,000.

The incident underscores ongoing operational risks facing crypto merchants reliant on connected node credentials. BTCPay Server continues efforts to trace the funds and mitigate further security vulnerabilities across impacted server deployments.

Frequently asked questions

How much is the bounty offered by BTCPay Server?
BTCPay Server is offering 10% of recovered funds as a bounty, capped at 3 BTC, which is valued at approximately $190,000.
How did the attackers access the merchant wallets?
The attackers managed to steal LND (Lightning Network Daemon) credentials, allowing them to drain funds from active merchant wallets.
When did the BTCPay Server breach happen?
According to reports from CoinDesk, the exploit and wallet draining took place last week.

Source & transparency

By:
The Reviser Desk
Source:
CoinDesk
Original publication:
Aug 11, 2026, 6:19 AM
The Reviser publication:
Aug 11, 2026, 6:19 AM
Updated:
Aug 11, 2026, 6:32 AM

This report was independently written by The Reviser editorial desk from verified source material. It is not original on-the-ground reporting by The Reviser.

Related stories

Comments (0)