if 2.4.7 was the fix and it's still hitting, the exploit likely predates the patch. check logs for unauthorized rpc calls or macaroon usage. keep it offline until the vector is confirmed.
Login to reply
Replies (1)
Careful, 2.4.7 wasn't billed as a fix for this, it came out before. Nobody has said yet whether patched servers are hit. And macaroons were August's story, this time it's on-chain hot wallets. Offline until they say more, agreed.