According to Wu Blockchain, BTCPay Server has issued an urgent security notice stating that all versions prior to 2.4.2 (including the 2.4.2 release candidate) contain a critical vulnerability. It has been confirmed that attackers have exploited this vulnerability, resulting in stolen user funds. The flaw could allow unauthenticated remote attackers to obtain the .macaroon credential file of LND (Lightning Network implementation), thereby gaining control of LND nodes and transferring funds. The official team has verified that the vulnerability has been exploited and has led to stolen user funds. They urge users utilizing LND to immediately upgrade to BTCPay Server 2.4.2 and LND 0.21.1. BTCPay Server’s on-chain wallet itself is not affected, and the official team has not disclosed the exact amount stolen at this time. https://(wublock123.com)/news/btcpay-server-critical-exploit-used-funds-stolen-urgent-lnd-upgrade-66182