Supporters BTCPay Server In a recent statement, the project stated that they have agreed to fund a bounty up to three Bitcoins in order to help recover money stolen by a newly disclosed vulnerability within the open source bitcoin payment processor.
In the case of full recovery, the reward is 10 percent.
It even offered to offer Signal or another encrypted channel to anyone who requested it, along with the address of a special security department.
Last week, hackers were able to steal the Lightning Network administrator macaroon credential from BTCPay Server affected instances. Project published the technical details as well as remediation advice in an independent security advisory.
“To the users who lost funds: we are sorry,” The project was announced in a press release. “We will examine our mistakes, but regret alone will not help affected users or secure the project. There is no time to waste. We have to learn, improve, and act quickly.”
BTCPay Server Foundation announced that it will donate 0.21 Bitcoins (BTC) to Sparrow Wallet Developer Craig Raw, and a further 0.21 Bitcoins for the Bitcoin Red Team Fund in recognition of responsible disclosure.
Separately the project stated that security teams from exchanges, Blockchain analytics companies and law enforcement agents have contacted it offering their assistance to track down the stolen coin.
Users who are affected but haven’t yet reported the incident will be asked to provide their on-chain address and transaction details and file reports to local authorities, any exchanges or services where funds appear.
According to the project, individual reports can help maintain records and create a trail of evidence which increases the likelihood of frozen funds.
It was noted that the project said that AI-based models were making it easier and faster to scan large codebases and find weaknesses. This shifted the balance in favor of attackers. Bitcoin projects felt it first, as they are such valuable targets.
“This article is not financial advice.”
“Always do your own research before making any type of investment.”
“ItsDailyCrypto is not responsible for any activities you perform outside ItsDailyCrypto.”
Source: bitcoinmagazine.com
