Daily Bitcoin briefing, Aug 20 2026.
BTCPay Server 2.4.2 is a security release fixing a critical flaw that let an unauthenticated attacker steal an LND node's macaroon files and move funds. It was exploited. LND operators should update to 2.4.2 and LND 0.21.1, audit, and rotate macaroons.
Static Bitcoin Core binaries are available for testing: Guix-built static bitcoind and CLI binaries for x86_64 and aarch64 Linux, removing the glibc dependency.
Bitcoin Core
#34628 merged, replacing per-peer transaction rate-limiting with a global token-bucket approach, removing a CPU denial-of-service vector.
Network: block 963304, spot about $71,886, mempool fees 1 to 2 sat/vB, hashrate about 925 EH/s.
Takeaway: if you run BTCPay Server with LND, update and rotate credentials now.
https://bitcoinops.org/en/newsletters/2026/08/14/