According to CoinMeta, the Lightning Network wallet Zeus released a security incident review stating that on August 5th, attackers exploited vulnerabilities in btcpay and server to obtain the administrator credentials for the lnd node they were connected to. They then shut down most public and several private lsp channels, and stole funds from Zeus's own operational wallet. The exact amount of loss has not been disclosed. Zeus emphasized that after the channels were shut down, the funds were settled according to the protocol on-chain, and customer funds were not compromised; the company has taken responsibility for any related losses itself. Zeus has isolated the services that previously shared infrastructure, tightened firewall permissions, and adjusted the way credentials are stored. Additionally, due to security risks, zaplocker has been disabled. Officials recommend that btcpay and server users immediately upgrade to version 2.4.2 or later.