Cut Through CryptoBetaSubscribe
Update 6 of 8
BTCPay Server Flaw Under Active Attack

BTCPay Server Patches Critical Flaw Being Exploited Live as Lightning Nodes Are Drained

Verified · 8 Aug 2026BitcoinAug 8, 2026

BTCPay Server, the self-hosted open-source Bitcoin payment processor, shipped an emergency patch (2.4.2) on August 7 for a critical vulnerability it said was being actively exploited to drain funds, urging operators to update immediately or take servers offline. Lightning nodes run by hardware-wallet maker Foundation and zine Citadel21 were drained, some before the public warning. Operators were told to refresh macaroon credentials, rotate backend auth strings and move hot-wallet funds.

6 sources