Key facts
- BTCPay Server is offering a bounty for information on stolen Bitcoin.
- The bounty is 10% of recovered funds, capped at 3 BTC.
- A recent exploit targeted connected wallets.
- The vulnerability allowed access using credentials from vulnerable LND servers.
- Attackers gained access to connected wallets.
BTCPay Server is offering a financial incentive for the return of Bitcoin lost in a recent security exploit. Supporters of the open-source payment processor have announced a bounty, which will be equivalent to 10% of any recovered funds, up to a maximum of 3 Bitcoin. The exploit targeted connected wallets by leveraging compromised credentials from vulnerable Lightning Network Daemon (LND) servers. This allowed attackers to gain unauthorized access to user funds. The bounty aims to encourage the community to come forward with information that could help track down the stolen cryptocurrency and potentially lead to its recovery. The specific amount of Bitcoin stolen has not been disclosed, but the bounty structure suggests a significant sum may be involved, given the 3 BTC cap.