Every Zipp story tagged #BTCPay, newest first.
Patching alone may leave stolen credentials and wallet secrets exposed, so BTCPay recommends fresh servers, new wallets and rotated access keys.
Tor is no longer bundled by default in the standard Docker deployment, so operators who rely on onion access must explicitly add it at their next setup or update or their hidden service goes dark.
The $190K cap is the headline, but the real story is LND as a single-vendor credential risk now that attackers have demonstrated a working drain against the dominant Lightning node stack.
Standard BTCPay on-chain wallets are safe, but LND operators on v2.4.1 or earlier face remote node takeover via unauthenticated .macaroon file access.
Active exploitation makes this an infrastructure-security emergency for Bitcoin payment operators, not a routine maintenance notice.
CryptoSlate
CoinDesk
TheBlock