BTCPay Server Community Offers Bounty After Lightning Wallet Hack

BTCPay Server, an open-source platform used by businesses to accept Bitcoin payments, has confirmed that its community is backing a recovery bounty following an exploit of a Lightning wallet linked to the service. The bounty offers 10% of any funds recovered, capped at 3 BTC if the full amount stolen is returned.

The incident highlights an ongoing risk for businesses using cryptocurrency payment tools: even well-established, open-source platforms can have components, such as wallet integrations, that are targeted by attackers. Details on how the exploit occurred have not been fully disclosed, but the bounty approach reflects a common tactic in the crypto industry, incentivising hackers or third parties to return stolen funds rather than launder them.

For Australian small businesses accepting cryptocurrency payments, this is a reminder that digital asset systems require the same level of security diligence as traditional payment infrastructure. Wallet software, plugins, and third-party integrations should be kept updated and reviewed regularly for known vulnerabilities.