Supporters cap reward at 3 BTC for recovery of funds stolen via compromised Lightning Network credentials in recent exploit.
BTCPay Server supporters are offering a 10% bounty, capped at 3 BTC or roughly $190,000, for the recovery of stolen Bitcoin. The exploit targeted vulnerable LND servers, allowing attackers to access wallets using stolen credentials.
The breach was first disclosed Friday, with BTCPay urging users to update to version 2.4.2 or shut down servers. Attackers obtained admin macaroons, granting control over Lightning Network nodes connected to wallets. No total losses or affected user count have been confirmed.
BTCPay stated the offer extends to anyone, including the attacker, with information leading to fund recovery. The project acknowledged flaws and pledged rapid improvements to security protocols.