Attackers exploit vulnerability in BTCPay Server
Attackers stole credentials to control Lightning wallets and move funds.
The vulnerability allowed unauthenticated access to LND credential files.
Victims include hardware-wallet maker Foundation and bitcoin publication Citadel21.