Fml

Focus on what you can control, like your diet and health, not external events like hacks.

Why do you think that these funds were stolen? Why do you think is was because of a bug in 2FA in BTCPay server? Why does it say "exposed macaroon" in your screenshot? More specofically, why is that supposedly what enabled the funds to move and what does it have to do with BTCPay?

"Treat the attribution as resting on victim reports."

Also, the macaroon exposure directly conflicts with the BTCPay bug, which was related to 2FA, not macaroon exposure. Source: BTCPay release notes

GitHub

Release 2.4.2 · btcpayserver/btcpayserver

This release contains fix of a critical vulnerability that is being actively exploited. You need to update as fast as you can. We recommend integra...

yeah just based of this tweet from @Pavlenex and chainabuse report

X (formerly Twitter)

Pavlenex (@pavlenex) on X

Reported addresses linked to exploits of vulnerable BTCPay Server instances: 19jSfadPiKa4aCefj4F7uEYbhMEt2L8SCH 17C7EZC1VTrXzSQneiaJv2W6tQh1vCRSnF...

https://chainabuse.com/report/68a4e3b0-93fa-44b2-b86e-b76d3d7895ef

they mention it in their blog post

Security Advisory: Update BTCPay Server to 2.4.2 Immediately | BTCPay Server Blog

Official BTCPay Server Blog

Oh shit, they intentionally left the real vulnerability out of the release notes and changelog. That's seriously fucked up. I stand corrected. After reading that, I believe their blog post. There was more to tge update than the disclosed 2FA patch.