BTCPay Launches $190,000 Bounty for Recovery of Stolen Bitcoin Funds

BTCPay Server announced on Tuesday that it will fund a bounty for the recovery of bitcoin stolen from merchants, offering up to 10% of recovered amounts—capped at 3 BTC, approximately $190,000 at current rates.

The bounty is open to any individual possessing valuable information, including the perpetrator, and submissions can be sent to the project’s security address; confidential channels can be arranged upon request.

Should multiple submissions result in recovery, the bounty will be distributed among victims in proportion to their losses and the usefulness of the information provided.

We’re donating 0.21 BTC to @craigraw and 0.21 BTC to the Bitcoin Red Team for their responsible security disclosure of the recent critical vulnerability.

In addition, friends and supporters of the BTCPay Server project have committed to funding a bounty to recover the stolen… pic.twitter.com/qhs8zwoCvM

— BTCPay Server (@BtcpayServer) August 10, 2026

Additionally, the project is rewarding the researchers who identified the vulnerability, contributing 0.21 BTC to developer Craig Raw and to the Bitcoin Red Team fund.

Attackers leveraged the flaw last week to compromise credentials for LND—the predominant software for operating Lightning nodes—and subsequently drained the associated wallets.

Both hardware‑wallet manufacturer Foundation and the bitcoin outlet Citadel21 have reported financial losses. As of now, neither BTCPay nor the affected parties have disclosed the overall amount stolen.

Source link