BTCPay flaw drains Lightning nodes days after AI audit
August 10, 2026
Stolen macaroon credentials stay valid until operators rotate them, so the 2.4.2 patch alone does not close the breach.
Stolen macaroon credentials stay valid until operators rotate them, so the 2.4.2 patch alone does not close the breach.
A build setting silently disabled the hardware wallet’s randomness chip for five years, making seeds guessable