BTCPay flaw drains Lightning nodes days after AI audit August 10, 2026 Stolen macaroon credentials stay valid until operators rotate them, so the 2.4.2 patch alone does not close the breach. Read More »