Citadel21, the bitcoin publication run by pseudonymous commentator hodlonaut, also reported that its Lightning node had been swept, though it said little money was held there.
The vulnerability had already been reported to BTCPay by members of the Bitcoin Red Team — a group of developers that began pointing AI models at bitcoin codebases this week and has filed thousands of findings across hundreds of projects since.
Read More: Bitcoin developers flag 85 critical bugs in an “extremely bad” situation.
BTCPay credited Red Team members Craig Raw, Rob Hamilton, Calle and Evan Kaloudis with responsibly disclosing the issue and helping analyze it.
The group’s stated reason for publishing findings quickly was that people outside it would arrive at the same bugs, and by the time BTCPay’s public warning went out, attackers were already exploiting this one against live servers.
Meanwhile, BTCPay narrowed the scope after its initial alert,…
