NewsSOS

BTCPay restricts remote Lightning node access after attackers drain funds

8/9/2026

BTCPay moved to block remote access to Lightning nodes after attackers stole funds from operators, the company said. The BTCPay Foundation and Citadel21 both reported drained nodes.

The total stolen and the number of affected operators remain unknown. How the attack surface worked BTCPay Server is an open-source, self-hosted payment processor.

Merchants and node operators run it on their own hardware to accept Bitcoin without relying on a third-party custodian. Among its tools is a remote management interface for Lightning Network nodes.

Lightning nodes hold bitcoin in peer-to-peer payment channels. Each open channel carries a live balance.

Keep reading

Read the full story

Open on NewsSOS