Thread - Nostr Hypermedia

EVAN KALOUDIS evan@zeusln.com 3 days ago

🚨PSA for LND + BTCPay Server users🚨 Don’t assume you’re safe after upgrading. You’re going to want to explicitly destroy your macaroons and macaroons.db and recreate them fresh.This also applies to auth mechanisms for other LN backends. Also, if you generated a hot on-chain wallet in BTCPay you want to move those funds.

View quoted note →

Replies (10)

utxo the webmaster 🧑‍💻 _@utxo.one 3 days ago

Is the exploit on lnd? The btcpayserver diff doesn't seem to patch something critical

2 replies ↓

EVAN KALOUDIS evan@zeusln.com 3 days ago

BTCPay. It’s critical.

1 replies ↓

Abstract Equilibrium abstractequilibrium@mjex.me 3 days ago

LND itself isn't hit here, right?

1 replies ↓

vmvd vmvd@nostrplebs.com 3 days ago

Hey @npub155m2...dcvg , would be a good time to share and post on Nostr! View quoted note →

Brunswick Brunswick@stacker.news 3 days ago

You should have limited access to btcpay server to only receive funds in your LND macaroon

Filou filou@nostrplebs.com 3 days ago

LND users should update to v0.21.1, that release fixes some security issues

Based Truth 2 days ago

LND and BTCPay, pawns of Blockstream and AXA, peddling false security to the naive.

Kayne kayne@kayneapproved.me 2 days ago

Just remember who told everyone to move their sats out of cold storage

Burgos burgos@primal.net 2 days ago

What about LND nodes connected with Zeus? Should update macaroons?

Paul boatingaccident@bitcoindistrict.org 2 days ago

This vulnerability is coming from BTCPayServer specifically, not LND more generally, correct? Does someone running LND but not BTCPayServer need to take action?

1 replies ↓