A critical security vulnerability in the popular open-source payment processor BTCPay Server was actively exploited on August 7, 2026, leading to the theft of Bitcoin from Lightning Network nodes and prompting an urgent call for users to update their software or take systems offline.