shocknet_justin on Nostr: Looking at the patch commits it seems that an attacker could glean connection details ...

Looking at the patch commits it seems that an attacker could glean connection details to the backing node.

Even if there's no evidence you were hit yet and have no funds hot, you wouldn't want to receive a payment with an attacker lying in wait,

Rotate the connection credentials to the backing node.

quoting
nevent1q…3yxv

🚨PSA for LND + BTCPay Server users🚨

Don’t assume you’re safe after upgrading.

You’re going to want to explicitly destroy your macaroons and macaroons.db and recreate them fresh.This also applies to auth mechanisms for other LN backends.

Also, if you generated a hot on-chain wallet in BTCPay you want to move those funds.

nevent1q…fz9q