Wire · technology
Another Bitcoin Infrastructure Exploit Hits, Draining Merchant Lightning Nodes
◆ Sectors
◆ Source
◆ Verified
Fusion42 · 28 August 2026 · Fusion42 review
A critical vulnerability in BTCPay Server's implementation of the Bitcoin Lightning Network exposed '.macaroon' credential files, allowing attackers to drain funds from merchant Lightning nodes. Users are urged to update to version 2.4.2 or take their servers offline to prevent further exploits.
This Wire brief sits within Fusion42's coverage of Cybersecurity and Crypto & Web3, and 3 sources have reported it between 8 Aug 2026 and 11 Aug 2026.
◆ ◆ The Wire takeaway
Your Lightning node infrastructure just lost its safe zone. Update BTCPay Server now or halt operations to stop attackers from taking your funds.
◆ Coverage
3 sources · first reported 8 Aug 2026 · latest 11 Aug 2026
◆ Related on Wire
◆ Topics