Critical Bitcoin Lightning Security Flaw Hits Payment Servers

A serious security vulnerability is impacting Bitcoin payment servers. BTCPay is urging all users who run LND nodes to update their software immediately or shut down their servers to prevent theft. Hackers are actively targeting these systems to steal credentials, which gives them full control over Lightning wallets and the ability to move user funds.

This incident highlights the risks associated with running self hosted infrastructure. When a weakness is discovered in a widely used tool like LND, attackers often move quickly to scan for exposed servers. If your system is compromised, the attacker can drain your channel balances without needing additional authorization.

If you manage a node, check your versions right now. The development team has released patches to fix the flaw, but your servers remain at risk until the updates are finished. Keep an eye on official communication channels for further technical guidance as the situation progresses.