BTCPay Server Exploit Drains Lightning Nodes, Hits Foundation

Standard BTCPay on-chain wallets are safe, but LND operators on v2.4.1 or earlier face remote node takeover via unauthenticated .macaroon file access.

CoinDesk