According to CoinMeta, after confirming that attackers exploited a critical vulnerability to steal Lightning Network credentials and transfer funds, they temporarily restricted public remote access to Lightning Network nodes running LND. This vulnerability affects all versions of BTCPay Server prior to 2.4.2, including the 2.4.2 pre-release version. It has been confirmed that users of BTCPay have been affected and funds have been stolen, but the total amount of losses or the number of affected operators has not yet been disclosed. The project has pledged to release a more detailed follow-up report in the coming days.