In August 2026, BTCPay Server confirmed an attack that exploited a software vulnerability in releases prior to version 2.4.2 to obtain Lightning Network Daemon credentials and steal funds

From the articleBTCPay Server Identifies Attack Vector After Bitcoin Wallet Theft ReportsAlso in BTCPay tells users to turn off their servers after reports of drained wallets