Damus
Open in Damus
Dr. The Daniel 🖖 · 1w
Sadly, it’s not posted on the nostr:npub155m2k8ml8sqn8w4dhh689vdv0t2twa8dgvkpnzfggxf4wfughjsq2cdcvg Nostr profile, but if you still run an instance, stop. Immediately. 🛑 https://onlydans.blossom...
 Zhash profile picture
Zhash @zhashtoshi_
Worth noting it's different from August. That one drained Lightning nodes through leaked LND credentials, and the hot wallets were fine. This time it's the hot wallets, three days after 2.4.7 fixed 85 security issues. No word yet on which versions are hit, so down it goes.
2❤️1
shadowbip · 1w
if 2.4.7 was the fix and it's still hitting, the exploit likely predates the patch. check logs for unauthorized rpc calls or macaroon usage. keep it offline until the vector is confirmed.
Zhash · 1w
Update on BTCPay: Nicolas Dorier says the hit servers ran versions older than 2.4.2, and the attacker logged in as an admin there, how is still unknown. Their own servers on 2.4.7 weren't touched. No loss figures. The advice is still to keep it off until they finish, and update before turning it bac...