Home›Crypto›Market Structure›BTCPay restricts remote Lightning access after attacke…

BTCPay restricts remote Lightning access after attackers steal funds

BTCPay temporarily blocked public remote connections to Lightning nodes running LND after attackers exploited a critical vulnerability to obtain macaroon credentials.

Reported · Written up by our desk · Market Structure

Cointelegraph reports that BTCPay Server temporarily restricted public remote connections to Lightning Network nodes running Lightning Network Daemon, or LND, after attackers exploited a critical vulnerability to obtain credentials and move funds. BTCPay said the restriction blocks external wallets, including Zeus, from connecting through a BTCPay Server domain or Tor onion address on Docker deployments. The company added that Lightning payments can continue, and it plans to restore the remote-access option once it determines it is safe.

Cointelegraph reports that BTCPay’s Version 2.4.2 installs LND 0.21.1 and automatically regenerates the macaroon credentials on standard BTCPay installations. It advised operators to check for unauthorized payments, unexpected channel closures, unfamiliar peers, and discrepancies between their records and their onchain or Lightning balances.

The breach follows other security incidents affecting widely used Bitcoin products, though Cointelegraph notes that these separate events targeted software surrounding Bitcoin rather than the network’s underlying protocol. The BTCPay advisory described a vulnerability that allowed an unauthenticated remote attacker to obtain macaroon credential files used to control LND, potentially enabling attackers to take control of a node and move its funds.

Latest closeBitcoin $64,751.80 ▼0.2%

More like this

Sources