Home›Crypto›Market Structure›BTCPay Server offers $190,000 bounty for stolen bitcoi…

BTCPay Server offers $190,000 bounty for stolen bitcoin recovery

The bounty pays 10% of any recovered funds, capped at 3 BTC, after attackers exploited a vulnerability to steal Lightning node credentials and drain merchant wallets.

Reported · Written up by our desk · Market Structure

BTCPay Server is offering a bounty aimed at recovering bitcoin stolen in a recent exploit that drained payment servers tied to Lightning. The project said it will pay 10% of any funds recovered, up to a maximum of 3 BTC, which it valued at roughly $190,000 at current prices.

According to CoinDesk, the theft was traced to a vulnerability that allowed attackers to obtain LND Lightning node credentials and then drain connected wallets, affecting merchants including Foundation and Citadel21. BTCPay said it is asking people to contact its security address through secure channels if needed.

BTCPay Server said it has engaged exchanges, blockchain analytics firms, and law enforcement to help trace the stolen bitcoin, and urged merchants to report their losses and keep most holdings in cold storage. CoinDesk also reported the flaw was identified by researchers associated with the volunteer Bitcoin Red Team, with BTCPay compensating them through BTC donations.

BTCPay said if multiple reports help lead to a recovery, the bounty will be split with victims based on how much each lost and how useful the information proved. It also said it donated 0.21 BTC each to developer Craig Raw and to the Bitcoin Red Team fund for responsible security disclosure of the vulnerability, and neither it nor the victims has published a total amount stolen so far.

Latest closeBitcoin $64,065.63 ▲0.2%

More like this

Sources