pull down to refresh

1 sat \ 5 replies \ @justin_shocknet OP 7 Aug -21 sats \ parent \ on: Critical: BTCPay Exploit in the wild bitcoin

Same applies, same for chain keys generated in BTCPay. An attacker could glean all your deets.

write
compose
1 sat \ 4 replies \ @ZezzebbulTheMysterious 7 Aug

Ive patched the main btcpayserver container to 2.4.2

Are you referring to the hot wallet mainnet keys?

Id like to know more about the actual exposure here -- CLN uses a unix socket for RPC. There are no creds between CLN and BTCPayServer. There is nothing to rotate there.

reply
1 sat \ 3 replies \ @justin_shocknet OP 7 Aug -21 sats

Yes if you have hotwallet keys in BTCPay itself

Unix socket should be ok since there's no creds like you said, would apply more to CLN REST etc