New YorkAttackers drained Foundation’s and Citadel21’s Lightning nodes.
Lightning nodes must stay hot to route payments; a flaw exposed the credential files that control them.
BTCPay told Lightning node operators to update immediately; the team has not disclosed how much bitcoin was taken.
Sources: CoinDesk