BTCPay Server Offers $190K Bounty After BTC Wallet Exploit

Open source payment processor BTCPay Server is offering a reward worth up to 3 BTC to recover stolen funds following a security breach last week. Attackers managed to steal LND credentials, allowing them to drain funds directly from merchant Lightning wallets connected to the platform.

The team announced it will pay a 10% bounty on any recovered funds, capped at 3 BTC, which is worth around $190,000. Lightning Network exploits are particularly concerning for online merchants who rely on automated payment setups to process daily Bitcoin transactions safely.

BTCPay Server developers are urging node operators and merchants to double check their security setups and rotate compromised credentials immediately. The project is actively working with security researchers to trace the stolen funds and patch the vulnerabilities that allowed the credential leak.