How Did The BTCPay Vulnerability Expose Lightning Wallets? “The vulnerability allowed an attacker to obtain LND admin macaroon credentials from affected instances and use them to access connected LND wallets,” the project said. The vulnerability specifically affected users running BTCPay Server with LND, one of the main implementations of the Bitcoin Lightning Network. BTCPay said its onchain Bitcoin wallets were not affected, including hot wallets managed through the platform. The distinction limits the scope of the exploit because attackers were able to target connected LND wallets rather than BTCPay’s broader onchain wallet infrastructure.