Lightning Network wallet ZEUS released a post-mortem on a security incident, stating that on August 5, attackers exploited a vulnerability in BTCPay Server to obtain admin macaroon credentials for its connected LND node. This allowed them to close most public and several private LSP channels and steal funds from ZEUS's operational wallet. The exact amount of the loss has not been disclosed. ZEUS emphasized that after the channel closures, funds were settled on-chain per protocol, and customer funds were not affected. The company has absorbed the losses itself. ZEUS has since isolated services that previously shared infrastructure, tightened firewall permissions, and adjusted credential storage methods. Additionally, due to security risks, Zaplocker has been disabled. The official recommendation is for BTCPay Server users to upgrade immediately to version 2.4.2 or higher. https://(wublock123.com)/news/zeus-attacked-via-btcpay-vulnerability-customers-funds-safe-66562