BTCPay offers $190,000 bounty after bitcoin payment servers drained in exploit
·2 min read
Compiled by KHAO Editorial
— aggregated from 2 sources + 9 references discovered via search.
See llms.txt for citation guidance.
✓ KHAO Verified
Node provider BTCPay Server said Tuesday it is funding a bounty for the return of bitcoin stolen from merchants last week, offering 10% of whatever is recovered up to a maximum of 3 BTC, worth roughly $190,000 at current prices.
Key facts
Node provider BTCPay Server said Tuesday it is funding a bounty for the return of bitcoin stolen from merchants last week, offering 10% of whatever is recovered up to a maximum of 3 BTC, worth
They're donating 0.21 BTC to and 0.21 BTC to the Bitcoin Red Team for their responsible security disclosure of the recent critical vulnerability
The project is also paying the researchers who found the flaw, donating 0.21 BTC each to developer Craig Raw and to the Bitcoin Red Team fund
The Bitcoin Red Team is the volunteer effort that began pointing AI models at bitcoin codebases this month and has filed thousands of findings across hundreds of projects, including the report
Summary
BTCPay Server is offering a bounty of 10% of any recovered stolen bitcoin, up to 3 BTC, to anyone with information leading to the funds’ return, including the attacker. The theft stemmed from a vulnerability that let attackers obtain LND Lightning node credentials and drain connected wallets, affecting merchants including Foundation and Citadel21. BTCPay has enlisted exchanges, blockchain analytics firms and law enforcement to help trace the funds, while urging merchants to report losses and keep most holdings in cold storage. The flaw was identified by researchers tied to the volunteer Bitcoin Red Team, which is using AI tools to scan bitcoin projects for bugs, and BTCPay is compensating them with BTC donations.