Critical Vulnerability in BTCPay Server Threatens Security

Critical Vulnerability in BTCPay Server Threatens Security

BTCPay Server, a popular platform for accepting Bitcoin payments, has faced a serious issue: a vulnerability has been discovered that allows attackers to illicitly withdraw funds from the Lightning Network.

LND and Lightning Network Issue

The problem is relevant for configurations with LND (the most used software for Lightning nodes). Shops using BTCPay deploy it for direct Bitcoin payment acceptance, bypassing intermediaries, and connect Lightning Network for conducting small transactions. Due to an error in the .macaroon files, attackers managed to intrude without authorization, gaining full control over the node and the ability to close channels.

Incident Analysis and Impact

According to BTCPay developers, regular Bitcoin wallets are unaffected, but funds on LND addresses were at risk. Although the exact number of affected stores and the total loss amount are unknown, the damage appears significant considering the platform’s usage scale.

Response and Solutions

BTCPay developers urgently called on users to update the software to version 2.4.2 via the admin panel: Admin Dashboard -> Server -> Maintenance -> Update. Members of the volunteer organization Bitcoin Red Team, who discovered the threat with AI assistance, had notified BTCPay of the issue in advance, increasing pressure on developers for a rapid response.

Attack Consequences and Similar Incidents

At least two companies publicly reported the attack’s impact: Foundation, a hardware wallet manufacturer, and Bitcoin publication Citadel21. In the former case, the company’s Lightning node was depleted, but the main on-chain wallet was unaffected. These incidents raise questions about the security of decentralized nodes amid rapid technological development.

Conclusion

Critical vulnerabilities like the one found in BTCPay Server underscore the necessity for continuous security measures and quick responses to potential threats.

• Strengths: Developers promptly offered an update.
• Risks: Compromise of decentralized nodes can lead to economic losses.
• Opportunities: Strengthening security measures and further developing this technology.
• Threats: Continued attacks on weakly protected systems may cause user distrust.

Follow new insights in our telegram channel.

No need to invent complex schemes and look for the "grail". Use the Resonance platform tools.

Register via the link — get a bonus and start earning:
OKX | BingX | KuCoin.

Promo code TOPBLOG gives you a 10% discount on any Resonance tariff plan.