BTCPay Server Exploited: LND Users Warned to Patch

Operators of self-hosted Bitcoin payment infrastructure are facing a critical security emergency after a new breach exposed Lightning Network payment hubs. BTCPay Server issued an urgent directive to system administrators, advising anyone running the Lightning Network Daemon (LND) implementation to apply immediate software patches or take their instances completely offline.

The vulnerability centers on unauthorized access to high-privilege credentials that grant administrative oversight over affected payment nodes. Once compromised, these credentials allow bad actors to manipulate wallet permissions and silently siphon off hosted digital assets without triggering typical warning mechanisms.

Security maintainers discovered that the attack specifically targets setups connecting the open-source payment gateway with the LND protocol. While non-LND configurations appear unaffected for now, security teams strongly urge all node operators to isolate susceptible server environments until updates are applied.

This security breach marks yet another setback for layer-two scaling setups, which have increasingly become prized targets for sophisticated exploits. Merchants and node operators relying on automated payment processing now face an urgent scramble to fortify their setups against unauthorized withdrawals.

Administrators are urged to rotate all sensitive credentials, update their core software stacks to the latest release, and closely monitor on-chain and off-chain balances for any irregular outbound transfers.