BTCPay has restricted remote access to Lightning functionality after Foundation and Citadel21 reported drained Lightning nodes. The total amount stolen and the number of affected operators have not been disclosed.
BTCPay has restricted remote access to Lightning functionality after Foundation and Citadel21 reported drained Lightning nodes. The total amount stolen and the number of affected operators have not been disclosed.
The development matters because BTCPay is part of the broader Bitcoin payments ecosystem, where Lightning is used to support faster and lower-cost transactions. Any report of drained Lightning nodes raises operational concerns for merchants, infrastructure providers and self-hosted payment users that rely on remote access to manage payment flows.
BTCPay has restricted remote Lightning access after reports that attackers drained funds from Lightning nodes. According to the source material, Foundation and Citadel21 reported the incidents, while the total amount stolen and the number of affected node operators remain unknown.
The development matters because BTCPay is part of the broader Bitcoin payments ecosystem, where Lightning is used to support faster and lower-cost transactions. Any report of drained Lightning nodes raises operational concerns for merchants, infrastructure providers and self-hosted payment users that rely on remote access to manage payment flows.
The available information does not identify how many operators were affected or quantify the losses. That uncertainty leaves the scale of the incident unclear and limits what can be concluded about its wider impact.
BTCPay’s move to restrict remote Lightning access appears aimed at reducing exposure while the issue is addressed. For users and companies running Lightning infrastructure, the incident underscores the importance of access controls and careful node administration.
No investment conclusions can be drawn from the report. The confirmed facts are limited to the access restriction, the reported drained nodes, and the lack of public detail on total losses or affected operators.
Keep exploring
Brazil’s central bank will require exchanges to delay certain crypto transfers abroad and to self-custody wallets for up to 24 hours. The rule, set to take effect on Jan. 1, 2027, applies to transfers above $10,000 and smaller transactions flagged as risky.
Read
US spot Bitcoin ETFs drew $1 billion in weekly inflows, marking their strongest week since April. The performance was described as the third-strongest since October, pointing to renewed institutional momentum.
Read
A volunteer Bitcoin security initiative says it has scanned 150 repositories and disclosed more than a dozen vulnerabilities. The group is also building an open-source AI platform designed to automate software security reviews.
Read