BTCPay Server Issues Emergency Fix for Exploited Lightning Node Flaw

Key Facts

Security incidents involving self-hosted infrastructure underscore the risks of operating crypto payment services without prompt software updates. BTCPay Server released emergency version 2.4.2 to address a critical vulnerability that is being actively exploited. The flaw specifically targets Bitcoin Lightning Network nodes, according to the available information. Bitcoin Red Team discovered and disclosed the vulnerability, prompting the emergency release.

BTCPay Server is a self-hosted cryptocurrency payment processor. Active exploitation creates an immediate risk to user funds before affected operators apply the fix. The availability of the update is a key mitigant, while attention will focus on how quickly node and service operators respond.