[ad_1]
Supporters of BTCPay Server have dedicated to funding a bounty of as much as three Bitcoins for the restoration of funds stolen by a just lately disclosed vulnerability within the open-source bitcoin fee processor, the venture mentioned in a press release.
The bounty is ready at 10 p.c of no matter is recovered, capped at three cash within the occasion of a full restoration.
The venture even prolonged the supply to the attacker straight alongside anybody else holding actionable data, directing them to a devoted safety deal with and providing Sign or different encrypted channels on request.
Hackers final week managed to extract Lightning Community admin macaroon credentials from affected BTCPay Server situations. The venture revealed technical particulars and remediation steering in a separate safety advisory.
“To the customers who misplaced funds: we’re sorry,” the venture mentioned in a press release. “We’ll look at our errors, however remorse alone is not going to assist affected customers or safe the venture. There isn’t a time to waste. We now have to be taught, enhance, and act shortly.”
The BTCPay Server Basis mentioned it could donate 0.21 Bitcoins to Sparrow Pockets developer Craig Uncooked and an extra 0.21 Bitcoins to the Bitcoin Crimson Workforce fund in recognition of their accountable disclosure of the vulnerability.
Individually, the venture mentioned it has been contacted by safety groups at exchanges, blockchain analytics companies and regulation enforcement businesses providing help in monitoring the stolen cash.
Affected customers who haven’t but come ahead are being requested to share on-chain addresses and transaction particulars, and to file stories with native authorities and any change or service the place the funds floor.
Particular person stories, the venture mentioned, assist protect data and set up a sequence of proof that improves the percentages of funds being frozen.
The venture added that bettering AI fashions are making it quicker and cheaper to comb giant codebases for weaknesses, shifting the stability towards attackers, and that Bitcoin tasks are feeling it first as a result of they’re unusually beneficial targets.
[ad_2]
Source link
Frequently Asked Questions
What is the BTCPay Server bounty for?
The BTCPay Server has announced a bounty of up to three Bitcoins aimed at recovering funds stolen due to a recently disclosed vulnerability. This bounty is set at 10% of any recovered funds, capped at three Bitcoins for a full recovery.
How can the attacker claim the bounty from BTCPay Server?
BTCPay Server has extended the bounty offer directly to the attacker and anyone with actionable information. They can reach out via a dedicated security address or request encrypted communication channels like Signal.
What happened to BTCPay Server's funds?
Hackers exploited a vulnerability in BTCPay Server, allowing them to extract Lightning Network admin macaroon credentials, which led to the theft of funds from affected instances of the server.
What support is BTCPay Server receiving after the incident?
Following the incident, BTCPay Server has been contacted by security teams from exchanges, blockchain analytics firms, and law enforcement agencies offering assistance in tracking the stolen funds.
What actions are affected users encouraged to take?
Affected users are urged to share their on-chain addresses and transaction details, file reports with local authorities, and notify any exchanges or services where the stolen funds may appear to help preserve evidence.
