Exchange Ranking
Top Exchanges
24h Volume Ranking
Popularity Ranking
Exchange BTC Balance
Proof of Reserves
Decentralized Exchanges
Funding Rate
Funding Heatmap
Liquidation Data
Max Pain
Long/Short Ratio
Whale L/S Ratio
Binance/Okex/Huobi L/S
Bitfinex Margin L/S
ETF Tracker
Solana ETF
XRP ETF
Hong Kong ETF
Bitcoin Treasuries
Crypto Reversal
Ethereum Reserves
HyperLiquid Wallet Analysis
Hyperliquid Whale Watch
Large Transactions
On-chain Movement
Bitcoin ROI
Stablecoin Market Cap
Options Analysis
News
Articles
Economic Calendar
Features
Wallet
Contract Calculator
Security
Collections
Watchlist
Following
BTC BTCPay Server offers a reward for recovering stolen bitcoins, up to 3BTC
Backers of BTCPay Server have announced that if all bitcoins stolen in recent vulnerability attacks can be recovered, they will provide 10% of the recovered funds as a reward, with a maximum of 3BTC (currently worth approximately US$190,000).
BTCPay said in a post posted on Monday that the reward is open to anyone with information that could help recover the funds, including the attacker himself.
"We reflect on our mistakes, but remorse alone cannot help affected users or keep the project safe," the company wrote."There is no time to waste. We must learn, improve and act quickly."
BTCPay issued an attack warning to users for the first time on Friday, urging them to install a new version of 2.4.2 or shut down their servers. At the time, the project had not confirmed any theft or explained the specific principles of the vulnerability.
According to BTCPay, the vulnerability allows an attacker to obtain an LND administrator rights token (a credential that provides extensive control over Lightning network nodes) and use it to access associated wallets. Lightning Network is a second-layer payment network built on the Bitcoin blockchain that enables faster and cheaper transactions. Lightning network nodes route payments through channels between users.
BTCPay has not disclosed the exact amount of stolen bitcoins, the number of users affected, and whether some funds have been recovered.
If there are multiple clues to help recover funds, the reward will be distributed based on the victim's situation. The project said it will consider each victim's loss, the amount recovered and the validity of each clue.
The BTCPay Server Foundation will also donate 0.21 BTC to security researcher Craig Raw and Bitcoin Red Team Foundation in recognition of their responsible disclosure of the vulnerability.
"These contributions are small, but as open source projects, they are within our reach and a thank you to all researchers working on critical security-related work whose work benefits the entire ecosystem," BTCPay wrote.
The company said it is stepping up code review and prioritizing security patches over new features because artificial intelligence makes it easier for attackers to discover vulnerabilities in Bitcoin software.
"Protecting software in this environment requires better tools, more thorough reviews, faster security responses, and support for researchers who discover and report vulnerabilities responsibly," BTCPay wrote.
