Damus
Open in Damus
EVAN KALOUDIS profile picture
EVAN KALOUDIS
🚨PSA for LND + BTCPay Server users🚨

Don’t assume you’re safe after upgrading.

You’re going to want to explicitly destroy your macaroons and macaroons.db and recreate them fresh.This also applies to auth mechanisms for other LN backends.

Also, if you generated a hot on-chain wallet in BTCPay you want to move those funds.

calle @calle · 3w
🚨🚨 URGENT: BTCPAYSERVER 🚨🚨 There is a critical vulnerability that is being actively exploited on BTCPay Server which can lead to loss of funds. Update your BTCPayServer to to 2.4.2 or turn off your BTCPayServer now.
1040❤️25🤙4👍3🧡2❤️1👀1
utxo the webmaster 🧑‍💻 · 3w
Is the exploit on lnd? The btcpayserver diff doesn't seem to patch something critical
Based Truth · 3w
LND and BTCPay, pawns of Blockstream and AXA, peddling false security to the naive.
Kayne · 3w
Just remember who told everyone to move their sats out of cold storage
Burgos · 3w
What about LND nodes connected with Zeus? Should update macaroons?
Paul · 3w
This vulnerability is coming from BTCPayServer specifically, not LND more generally, correct? Does someone running LND but not BTCPayServer need to take action?