🚨 We are receiving reports of hot wallets on BTCPay Servers being swept by unauthorized attackers.
If you're running an instance, please shut it down (./btcpay-down.sh) until we complete the investigation.
We're grateful to have received code and security scans from the following teams and individuals:
Bitcoin Red Team
@AnthropicAI@knorrium@MrHodl
Renato Garda
Agli Chandra
Thank you for helping us fortify ZEUS.
ZEUS 13.2.3 on Google Play: reproducible ✅
We rebuilt it from source. The only differences are Google Play's own additions: its signature, source stamp and one manifest tag. Our 4 builds also match ZEUS's published unsigned hashes.
Congrats @ZeusLNwalletscrutiny.com/mobile/ap…
I wasn't quite satisified with the Lightning invoice decoders out there so I built my own: decoder.zeusln.com
It supports BOLT 11 invoices, BOLT 12 offers, LNURLs, and lightning addresses. As a bonus there's a tool to verify that a preimage belongs to an invoice.
Everything is decoded and kept in your browser so your information stays private. ZEUS collects no data.
Core Lightning 26.06.9 is out. Upgrade now.
It fixes a newly reported vulnerability that can lead to loss of funds. Nodes running 26.06.8 or earlier are affected.
Verify the signatures and install it as soon as possible.
github.com/ElementsProject/l…