BTCPay Backers Offer Bitcoin Bounty After Wallet Exploit
BTCPay Server supporters are offering a 10% bounty, capped at 3 BTC, for the return of Bitcoin stolen in a recent exploit, and will pay anyone whose information helps recover the funds, including the attacker. BTCPay said it is reviewing its mistakes and moving quickly to improve security. The project warned users to upgrade to version 2.4.2 or take servers offline after discovering the flaw. The vulnerability reportedly let attackers steal LND admin macaroons, giving broad control over Lightning Network nodes and access to connected wallets. BTCPay has not disclosed the amount stolen, the number of affected users, or whether any funds have been recovered. If multiple tips lead to recovery, the bounty will be split based on victims’ losses and each tip’s usefulness. The foundation will also donate 0.21 BTC each to researcher Craig Raw and the Bitcoin Red Team fund for responsible disclosure.
