BTCPay restricts Lightning access after theft

• BTCPay Server has restricted remote Lightning Network access after attackers stole funds from some users.
• The issue affected servers exposed to the public internet through remote access.
• The project urged operators to disable remote Lightning access and secure affected systems.

BTCPay Server has restricted remote access to Lightning Network nodes after attackers stole funds from some users.

The project said the attacks targeted servers that exposed Lightning node interfaces to the public internet.

BTCPay said it disabled remote Lightning access by default and urged users to update their systems immediately.

The project said the attacks affected users who enabled remote access and did not properly secure their Lightning node services.

BTCPay said it is investigating the incident and working with affected users to assess the impact of the thefts.

The project said self-hosted payment systems can be vulnerable if administrative services are exposed to the public internet.

BTCPay said users should disable remote Lightning access, rotate credentials, and review server security settings while the investigation continues.