BTCPay Server supporters have set a maximum bounty of 3 BTC to recover stolen funds

According to The Block, supporters of the open-source Bitcoin payment processor BTCPay Server have pledged to establish a bounty for recovery: 10% of the recovered funds will be awarded, with a maximum of 3 BTC if the full amount is recovered.

BTCPay disclosed last Friday that a serious vulnerability is being actively exploited and urged users to upgrade as soon as possible. This vulnerability allows attackers to obtain LND administrator credentials, thereby gaining full control over connected Lightning wallets. BTCPay stated that on-chain wallets (including hot wallets) are not affected and did not disclose the total amount of losses or the number of affected nodes.