Community curated by people like you

BTCPay Server stories

Aug 7, 2026

BTCPay Server warns of critical vulnerability under active attack

BTCPay Server disclosed a critical vulnerability being actively exploited and urged users to immediately update to version 2.4.2 or shut down their servers. Foundation and Citadel21 reported their Lightning nodes were drained, in some cases hours before the public alert.

Aug 7, 2026·3 sources

00

Top claims

▪Nicolas Dorier stated that the Bitcoin Red Team's AI-assisted security scans missed the critical vulnerability because the bug was highly sneaky and difficult for a simple scan to detect
▪Foundation Chief Executive Officer Zach Herbert confirmed that the company's BTCPay Server Lightning node was drained overnight prior to August 7, 2026, though its hot wallet remained untouched
▪The pseudonymous bitcoin commentator hodlonaut reported that the Lightning node for the zine Citadel21 was swept by attackers during the BTCPay Server exploit on August 7, 2026

Subtopics

Bitcoin1 Bitcoin security & risks1 Crypto hacks1

Related timelines

Congress

Payments

Russia-Ukraine war

Trump administration

US health policy & drug pricing