BTCPay Server supporters back 10% bounty to recover stolen Bitcoin

cryptonews08-11 15:01

BTCPay Server supporters have backed a recovery bounty equal to 10% of funds retrieved from a recent Lightning wallet exploit, with the reward capped at 3 BTC if all stolen assets are recovered. ...

Source Link

Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.

Comments

We need your insight to fill this gap

Leave a comment

{"i18n":{"language":"en_US"},"isChannel":false,"data":{"share":"https://ttm.financial/m/news/2658672429?lang=en_US&edition=fundamental","thumbnail":"","is_english":true,"pubTime":"2026-08-11 15:01","share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","id":"2658672429","market":"sg","top_or_hot":-1,"title":"BTCPay Server supporters back 10% bounty to recover stolen Bitcoin","media":"cryptonews","content":"<div>\n<p>BTCPay Server supporters have backed a recovery bounty equal to 10% of funds retrieved from a recent Lightning wallet exploit, with the reward capped at 3 BTC if all stolen assets are recovered.\n\n\n...</p>\n\n<a href=\"https://crypto.news/btcpay-server-supporters-back-10-bounty-to-recover-stolen-bitcoin/\">Source Link</a>\n\n</div>\n","source":"crypto_news_highlight","html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>BTCPay Server supporters back 10% bounty to recover stolen Bitcoin</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nBTCPay Server supporters back 10% bounty to recover stolen Bitcoin\n</h2>\n\n<h4 class=\"meta\">\n\n\n2026-08-11 15:01 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://crypto.news/btcpay-server-supporters-back-10-bounty-to-recover-stolen-bitcoin/><strong>cryptonews</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>BTCPay Server supporters have backed a recovery bounty equal to 10% of funds retrieved from a recent Lightning wallet exploit, with the reward capped at 3 BTC if all stolen assets are recovered.\n\n\n...</p>\n\n<a href=\"https://crypto.news/btcpay-server-supporters-back-10-bounty-to-recover-stolen-bitcoin/\">Source Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","isBrief":false,"type":0,"news_type":1,"symbol":"FT_SY_XBT","symbol_name":"CBOE比特币","start_time":0,"source_url":"https://crypto.news/btcpay-server-supporters-back-10-bounty-to-recover-stolen-bitcoin/","article_id":"2658672429","we_media_id":null,"thumbnails":[],"rights":{"source":"crypto_news_highlight","url":"https://crypto.news/btcpay-server-supporters-back-10-bounty-to-recover-stolen-bitcoin/","rn_cache_url":null,"directOrigin":true},"url":"https://stock-news.laohu8.com/highlight/detail?id=2658672429","pubTimestamp":1786431715,"columns":[],"sourceInfo":{"source_id":"crypto_news_highlight","name":"Crypto News"},"weMediaInfo":null,"summary":"BTCPay Server supporters have backed a recovery bounty equal to 10% of funds retrieved from a recent Lightning wallet exploit, with the reward capped at 3 BTC if all stolen assets are recovered.BTCPay Server supporters have backed a 10% recovery bounty, capped at 3 BTC if all stolen funds are recovered.The exploit exposed LND admin macaroon credentials, allowing attackers to access connected Lightning wallets.BTCPay fixed the vulnerability in version 2.4.2, while its onchain wallets were not affected.The BTCPay Server Foundation is donating 0.21 BTC each to Craig Raw and the Bitcoin Red Team fund for discovering and reporting the flaw.BTCPay said AI may have helped uncover the vulnerability and is preparing a detailed postmortem.The BTCPay Server project said on Monday that the bounty is part of its response to a critical security flaw that exposed LND administrator credentials on vulnerable installations, days after users were told to immediately upgrade to version 2.4.2.The distincti","collect":0,"end_time":0,"defaultTopTitle":"crypto.news","property":[],"viewcount":null,"language":"en","relate_stocks":{"BTC":"Grayscale Bitcoin Mini Trust","AGIX":"通用人工智能 ETF-AGIX","GDLC":"Grayscale CoinDesk Crypto 5 ETF","DAPP":"VanEck Digital Transformation ETF","STCE":"Schwab Crypto Thematic ETF","BTYB":"VistaShares BitBonds 5 Yr Enhanced Weekly Distribution ETF","MSBT":"Morgan Stanley Bitcoin Trust ETP","IBIT":"比特币ETF-iShares","03008":"博时比特币","BETE":"等权重比特币&以太币期货ETF-ProShares","09008":"博时比特币-U","BTCI":"NEOS Bitcoin High Income ETF","VTHR":"Vanguard Russell 3000 ETF","BTF":"比特币&以太币期货ETF-CoinShares","CBTJ":"Calamos Bitcoin 80 Series Structured Alt Protection ETF - January","BETH":"比特币&以太币期货ETF-ProShares","03042":"华夏比特币","BTFX":"比特币期货ETF-CoinShares","BTCL":"T-REX 2X LONG BITCOIN DAILY TARGET ETF","BTGD":"STKD Bitcoin & Gold ETF","CHAT":"ROUNDHILL GENERATIVE AI & TECHNOLOGY ETF","BRRR":"比特币ETF-CoinShares","BITQ":"Bitwise Crypto Industry Innovators ETF","BEGS":"RAREVIEW 2X BULL CRYPTOCURRENCY & PRECIOUS METALS ETF","09042":"华夏比特币-U","AIPO":"Defiance AI and Power Infrastructure ETF","03439":"嘉实比特币","09439":"嘉实比特币-U","YBIT":"YieldMax Bitcoin Option Income ETF","CRPT":"First Trust SkyBridge Crypto Industry and Digital Economy ETF","OOQB":"One+One Bitcoin and Ether ETF","MNRS":"GRAYSCALE BITCOIN MINERS ETF","BTRN":"比特币期货ETF-Global X","BKCH":"AdvisorShares Sabretooth ETF","LFGY":"YieldMax Crypto Industry and Tech Portfolio Option Income ETF","QTOC":"Innovator Growth Accelerated Plus ETF - October","NCIQ":"HASHDEX NASDAQ CRYPTO INDEX US ETF","MAXI":"比特币期货ETF-Simplify","ARTY":"ISHARES FUTURE AI & TECH ETF","BITX":"2倍比特币期货ETF-Volatility Shares","DIME":"CoinShares Altcoins ETF","YBTC":"比特币看涨期权ETF-Roundhill","BTCZ":"T-Rex 2X Inverse Bitcoin Daily Target ETF","ARKY":"ARK 21SHARES ACTIVE BITCOIN ETHEREUM STRATEGY ETF","TEKX":"SPDR Galaxy Transformative Tech Accelerators ETF","VGT":"信息技术ETF-Vanguard"},"translate_title":"BTCPay服务器支持者返还10%赏金以追回被盗比特币","themeId":null,"isJumpTheme":false,"ttsUrl":null,"symbols_score_info":{"BTGD":1.5,"09042":1.5,"MAXI":1.5,"AIPO":0.9,"ARTY":0.9,"OOQB":1.5,"AGIX":0.9,"BTCmain":1.5,"TEKX":0.72,"VGT":0.9,"CBTJ":1.5,"BETH":1.5,"BTCL":1.5,"09439":1.5,"CHAT":0.9,"BETE":1.5,"STCE":1.5,"03439":0.72,"DIME":0.72,"MSBT":1.5,"QTOC":0.9,"GDLC":0.72,"VTHR":0.9,"BITX":1.5,"BRRR":1.5,"BTFX":1.5,"BTC":0.9,"BITQ":0.72,"BTRN":1.5,"IBIT":1.5,"BEGS":1.5,"BKCH":0.72,"03042":0.72,"09008":1.5,"MNRS":1.5,"YBIT":1.5,"BTCI":1.5,"CRPT":1.5,"LFGY":0.72,"NCIQ":1.5,"YBTC":1.5,"BTCZ":1.5,"BTYB":1.5,"ARKY":1.5,"BTF":1.5,"XBTmain":1.5,"03008":0.72,"DAPP":0.72},"content_text":"BTCPay Server supporters have backed a recovery bounty equal to 10% of funds retrieved from a recent Lightning wallet exploit, with the reward capped at 3 BTC if all stolen assets are recovered.\n\n\nSummary\n\n\n\nBTCPay Server supporters have backed a 10% recovery bounty, capped at 3 BTC if all stolen funds are recovered.\nThe exploit exposed LND admin macaroon credentials, allowing attackers to access connected Lightning wallets.\nBTCPay fixed the vulnerability in version 2.4.2, while its onchain wallets were not affected.\nThe BTCPay Server Foundation is donating 0.21 BTC each to Craig Raw and the Bitcoin Red Team fund for discovering and reporting the flaw.\nBTCPay said AI may have helped uncover the vulnerability and is preparing a detailed postmortem.\n\n\n\nThe BTCPay Server project said on Monday that the bounty is part of its response to a critical security flaw that exposed LND administrator credentials on vulnerable installations, days after users were told to immediately upgrade to version 2.4.2.\nThe open-source Bitcoin payment processor has not disclosed how much cryptocurrency was stolen or how many servers were compromised. However, several affected users, including Foundation and Citadel21, have reported that funds held in their Lightning nodes were drained.\n\nThis is an ongoing attack on BTCPayserver users.Citadel21's lightning node was just swept. Fortunately there were not much funds there, due to cautionary steps before BIP-110 activation.Praying for all other affected users. https://t.co/YhdHhoPncH pic.twitter.com/4iRj1HJptL— hodlonaut #BIP-110 (@hodlonaut) August 7, 2026\n\nBTCPay said the vulnerability affected all releases before version 2.4.2, including release candidate versions of 2.4.2. The flaw allowed an attacker to obtain LND admin macaroon credentials from exposed BTCPay instances and then access wallets connected to the affected Lightning nodes.\nA macaroon works as an authentication credential for a Lightning node, with an administrator macaroon providing extensive permissions over the associated wallet. Access to those credentials can therefore allow an unauthorized party to control funds held through the affected LND setup.\nBTCPay Server exploit was fixed in version 2.4.2\nFollowing the discovery, BTCPay released the final version of 2.4.2 with a fix for the vulnerability and urged operators running older versions to update their servers.\nThe project said the security issue was specific to LND credentials and did not expose users running other Lightning implementations through the same attack route. Operators who do not use Lightning were also not affected by the LND credential issue, although BTCPay recommended that all users install the latest release.\nBTCPay’s onchain wallets were not compromised through the vulnerability, including onchain hot wallets maintained by users of the software, according to the project.\nThe distinction limits the known attack path to connected LND wallets rather than the full range of Bitcoin funds that can be managed through a BTCPay installation.\nAlthough BTCPay has yet to release figures for the losses, reports from individual users have confirmed that the exploit resulted in stolen funds. The project is preparing a full postmortem that is expected to provide more information about the vulnerability and the response.\nBTCPay has also started introducing stronger code-scanning and review procedures with assistance from several external organizations.\nThe response follows a difficult year for crypto security. In April,crypto.news reported that CertiK had recorded more than $600 million in crypto losses during 2026 at the time, while the security firm warned that AI-assisted attacks and weaknesses in infrastructure were becoming important risks for projects.\nResearchers receive 0.42 BTC for finding the flaw\nAlongside the recovery bounty, the BTCPay Server Foundation is paying rewards to the researchers who identified the vulnerability before it was publicly disclosed.\nThe foundation is donating 0.21 BTC each to Sparrow Wallet developer Craig Raw and the Bitcoin Red Team fund. Raw discovered the security issue and privately reported it to BTCPay, allowing developers to prepare a fix before details of the flaw became public.\nRaw later said he had also been affected by the exploit.\nBitcoin Red Team operates as a volunteer security research group whose members include Rob Hamilton, Calle and Evan Kaloudis. The group works on finding and reporting vulnerabilities affecting Bitcoin-related software.\nBTCPay’s decision to fund both researchers comes alongside the separate recovery bounty backed by project supporters. Under the proposed terms, 10% of successfully recovered funds can be paid as a bounty, while a complete recovery would carry a maximum reward of 3 BTC.\n Recovery incentives have also surfaced after other crypto exploits this year. In July, crypto.news examined efforts to recover roughly 16 million ADA taken from 374 Cardano wallets in a late-June exploit. EMURGO outlined a process to return affected assets while an independent forensic team conducted a separate investigation into the incident.\nAI may have helped uncover the BTCPay Server exploit\nAs part of its initial assessment, BTCPay raised the possibility that artificial intelligence tools could have played a role in finding the vulnerable code.\nThe project said improving AI models have reduced the time and cost required to inspect large software repositories for weaknesses, changing the capabilities available to both attackers and security researchers.\nBitcoin software presents an attractive target because exploitable weaknesses can provide direct access to assets, BTCPay said, adding that other areas of the software industry could eventually face similar problems as AI-based code analysis becomes more capable.\nConcerns over AI-assisted attacks had already surfaced elsewhere in the crypto sector. CertiK reported in June that crypto hacks and exploits caused $68.3 million in losses during May, down nearly 90% from roughly $650 million in April, but the firm also recorded an increase in AI-assisted malware targeting code repositories and coding tools, as previously covered by crypto.news.\nA July analysis of AI security also examined how increasingly capable models can identify and exploit software vulnerabilities, with the technology arriving during a year already dominated by large crypto security incidents.\nThe BTCPay incident differs from attacks based primarily on social engineering or compromised signing devices because the entry point was a software vulnerability that exposed sensitive LND authentication credentials.\nColdcard exploit raised similar AI concerns\nThe BTCPay attack has followed another major Bitcoin security incident involving Coldcard hardware wallets, where the suspected use of AI to inspect older code was also raised after funds were stolen.\nAt least $116 million in losses have been confirmed from the Coldcard exploit so far. Coinkite, the company behind Coldcard, said it considered it likely that someone had used AI to examine older publicly available firmware and identify the weakness.\nThe two incidents have put code review under increased attention at a time when attackers have already moved beyond conventional smart contract vulnerabilities.\nIn April, crypto.news reported on more than $17 billion lost across 518 documented crypto hacks and exploits over the previous decade, citing DefiLlama data. The report found that private key leaks, credential theft, phishing and attacks against wallets and infrastructure had become major sources of losses alongside flaws in smart contracts.\nChainalysis has separately estimated that attackers stole $36.7 million from unverified, closed-source smart contracts during the first six months of 2026 by decompiling contract bytecode. The blockchain analytics firm assessed that AI was very likely involved in this activity.\nFor BTCPay users, the immediate remediation remains the official 2.4.2 release. The project has said it will publish a more detailed postmortem on the exploit while its new code-scanning and review procedures are being developed with external organizations.\n\n\n\n\n\n                Read more:\n            \nRiot Platforms signs $9.1B AI deal reportedly with Anthropic","kind":"highlight","is_publish_news":true,"is_publish_highlight":false,"is_publish_live":false,"is_publish_wemedia":false,"editions":null,"column":"","sentiment":"0","news_tag":"","news_rank":0,"isVideo":false,"video":null,"symbols":[],"gpt_button":0,"need_auth":false,"need_login_tip":false,"code":"91000000","status":"200"},"commentList":[],"isCommentEnd":true,"newsSizeData":{"likeSize":0,"commentSize":0,"repostSize":0,"favoriteSize":0,"likeStatus":false,"favoriteStatus":false},"APP":{"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","isDev":false,"isTTM":true,"isLaohu8Offline":false,"tenantId":"TBGLOBAL","deviceId":"web-server-community-laohu8-v3","version":"4.47.1","shortVersion":"4.47.1","platform":"web","vendor":"web","appName":"ttm","isIOS":false,"isAndroid":false,"isTiger":false,"isTHS":false,"isWeiXin":false,"isWeiXinMini":false,"isWeiBo":false,"isQQ":false,"isBaiduSwan":false,"isBaiduBox":false,"isDingTalk":false,"isToutiao":false,"isOnePlus":false,"isHuaWei":false,"isXiaomi":false,"isXiaomiWebView":false,"isOppo":false,"isVivo":false,"isSamsung":false,"isMobile":false},"href":"/m/news/2658672429","isCrawlerRequest":true}