Craig RAW

A critical BTCPay Server vulnerability exposed LND credential files, allowing attackers to control affected Lightning nodes and move funds. BTCPay has urged operators using LND to update to version 2.4.2 immediately or take servers offline while investigators prepare a postmortem.

Apple is facing a federal lawsuit alleging it allowed a fraudulent bitcoin wallet app impersonating Sparrow Wallet to remain on the App Store after a major theft report. Three plaintiffs claim they collectively lost about $1.84 million after entering seed phrases into the app.