BTCPay Server suffers from a critical vulnerability attack, urging immediate upgrades and credential changes

According to Decrypt, the Bitcoin payment processing project BTCPay Server has warned users of a serious vulnerability in its servers that is currently under active attack. Attackers may exploit this vulnerability to gain unauthorized access and cause financial loss. Administrators are required to upgrade to version 2.4.2 immediately and confirm that the server footer shows the update is complete.

If an upgrade cannot be performed in a timely manner, the official recommendation is for users to temporarily shut down BTCPay Server to prevent further attacks. Additionally, BTCPay Server advises users to change any potentially exposed macaroons credentials, recreate the macaroons.db file, and refresh the authentication strings for other Lightning Network backends.