Login to reply
Replies (2)
"Treat the attribution as resting on victim reports."
Also, the macaroon exposure directly conflicts with the BTCPay bug, which was related to 2FA, not macaroon exposure.
Source: BTCPay release notes

GitHub
Release 2.4.2 · btcpayserver/btcpayserver
This release contains fix of a critical vulnerability that is being actively exploited. You need to update as fast as you can.
We recommend integra...