In August 2026, BTCPay Server confirmed an attack that exploited a software vulnerability in releases prior to version 2.4.2 to obtain Lightning Network Daemon credentials and steal funds