BTCPay Server Announces Bitcoin Bounty Following Wallet Breach

BTCPay Server Announces 10% Bounty on Recovered Bitcoin

In response to a recent security breach, BTCPay Server is offering a bounty of up to 3 BTC, valued at around $190,000, for information that leads to the recovery of stolen funds. This initiative was announced this past Monday via a post on X.

The breach involved the theft of Bitcoin through compromised credentials from LND servers, enabling attackers to access linked wallets. BTCPay is urging users to update to the latest software version, 2.4.2, or take their servers offline to mitigate risks.

BTCPay highlighted the urgency of the situation, stating, “We will review our errors, but mere regret will not assist affected users or safeguard the project.” The organization has not disclosed specifics about the total Bitcoin stolen or the number of users affected but emphasizes that tips leading to recovery will reward contributors based on the relevance of their information.

In recognition of responsible vulnerability disclosure, the BTCPay Server Foundation plans to donate 0.21 BTC each to security researcher Craig Raw and the Bitcoin Red Team fund. The foundation also announced plans to strengthen its security protocols and prioritize updates to protect against potential exploits, acknowledging that advancements in AI have made it easier for malicious actors to breach systems.