BTCPay Server announced on Tuesday that it will fund a bounty for the recovery of bitcoin stolen from merchants, offering up to 10% of recovered amounts—capped at 3 BTC, approximately $190,000 at current rates.
The bounty is open to any individual possessing valuable information, including the perpetrator, and submissions can be sent to the project’s security address; confidential channels can be arranged upon request.
Should multiple submissions result in recovery, the bounty will be distributed among victims in proportion to their losses and the usefulness of the information provided.
We’re donating 0.21 BTC to @craigraw and 0.21 BTC to the Bitcoin Red Team for their responsible security disclosure of the recent critical vulnerability.
In addition, friends and supporters of the BTCPay Server project have committed to funding a bounty to recover the stolen… pic.twitter.com/qhs8zwoCvM
— BTCPay Server (@BtcpayServer) August 10, 2026
Additionally, the project is rewarding the researchers who identified the vulnerability, contributing 0.21 BTC to developer Craig Raw and to the Bitcoin Red Team fund.
Attackers leveraged the flaw last week to compromise credentials for LND—the predominant software for operating Lightning nodes—and subsequently drained the associated wallets.
Both hardware‑wallet manufacturer Foundation and the bitcoin outlet Citadel21 have reported financial losses. As of now, neither BTCPay nor the affected parties have disclosed the overall amount stolen.
Also Read
- Dollar-Yen Pauses Near 155 Ahead of FOMC Decision as Markets Remain Cautious
- U.S. Justice Seeks Forfeiture of $61 Million Tied to Sanctioned Iranian Oil Proceeds Laundered Through Binance Accounts
- Midnight NIGHT Token Redemptions Exceed 2 Billion as Final Thaw Phase Commences
- ECB Urges Eurozone Merchants to Join Digital Euro Pilot Program
