Bounty Offered: BTCPay Server Seeks Recovery of Stolen Bitcoin
In a proactive effort to mitigate the damage from a recent security breach, the team behind BTCPay Server has launched a recovery initiative. They are extending a reward equivalent to 10% of any successfully retrieved assets-up to a maximum of 3 BTC (approximately $190,000)-to anyone who facilitates the return of the stolen funds.
The Scope of the Security Incident
The vulnerability originated from compromised LND (Lightning Network Daemon) servers. By harvesting administrative macaroons-digital keys that provide elevated permissions over a Lightning node-malicious actors were able to bypass security protocols and drain connected wallets.
This incident serves as a stark reminder of the importance of node security. Much like leaving a master key to a vault in an unlocked drawer, the exposure of these credentials allowed unauthorized parties to exert full control over the affected infrastructure.
Immediate Action Required for Node Operators
BTCPay Server first alerted the community to the active exploit this past Friday. At that stage, the full extent of the theft was still being investigated. To protect their assets, users are strongly advised to take the following steps:
* Update Immediately: Ensure your instance is running version 2.4.2, which contains the necessary security patches.
* Emergency Shutdown: If you are unable to update your software right away, take your server offline immediately to prevent further unauthorized access.
A Commitment to Transparency and Improvement
In a public statement shared on X, the project developers emphasized that while they are conducting a thorough internal audit of their security failures, their primary focus remains on the users. “We will examine our mistakes, but regret alone will not help affected users or secure the project,” the team stated. “There is no time to waste. We have to learn, improve, and act quickly.”
The bounty is open to all parties, including the individuals responsible for the exploit, provided they cooperate in the restoration of the stolen Bitcoin. This strategy reflects a growing trend in the cybersecurity space, where projects prioritize the recovery of user funds over punitive measures during the immediate aftermath of a hack.
