⚠️ A critical vulnerability affecting btcpayserver (nprofile…xhfg) versions before 2.4.2 is being actively exploited.
If you run BTCPay Server on umbrel (nprofile…cnv5) , update immediately, then follow every step in this video to rotate your Lightning Node credentials (also see written instructions in the 2.4.2 release notes).
Updating alone is not enough.
Video by nmfretz (nprofile…st3d)
Official advisory: https://x.com/BtcpayServer/status/2085865561137831938
Pathfinder
npub1n8…kqwps
2026-08-08 12:00:18 UTC
Author Public Key
npub1n897m339tamj2n3xwtvad96wtyxz4g7xpw8yhfevfyc25c28zzwsxkqwpsSeen on
wss://premium.primal.netPublished at
2026-08-08 12:00:18 UTCEvent JSON
{
"id": "4d925c7ff18121ed01db877124aede5aafde3c1bc479b35b5c07543b763368d7",
"pubkey": "99cbedc6255f77254e2672d9d6974e590c2aa3c60b8e4ba72c4930aa6147109d",
"created_at": 1786190418,
"kind": 1,
"tags": [
[
"p",
"a536ab1f7f3c0133baadbdf472b1ac7ad4b774ed432c1989284193572788bca0",
"wss://brb.io/",
"mention"
],
[
"p",
"ea2e3c814d08a378f8a5b8faecb2884d05855975c5ca4b5c25e2d6f936286f14",
"ws://umbrel.local:4848",
"mention"
],
[
"p",
"def9a8b4d3eb250f40361430b37b7ae21eefc37ef8809286b75e157f6e628518",
"ws://umbrel:4848",
"mention"
],
[
"r",
"wss://nostr.wine/"
],
[
"r",
"wss://relay.primal.net/"
],
[
"r",
"wss://premium.primal.net/"
],
[
"r",
"wss://nos.lol/"
],
[
"imeta",
"url https://blossom.primal.net/f9476ca6d72cb5f7bae4e4a5d601fc6b0f8f688157054f3e57043db57e7dcd73.mp4",
"m video/mp4",
"dim 1160x720",
"duration 80.833333",
"bitrate 314103.9848004288",
"service nip96"
],
[
"client",
"Primal Web"
]
],
"content": "⚠️ A critical vulnerability affecting nostr:nprofile1qyxhwumn8ghj7cnjvghxjme0qyt8wumn8ghj7etyv4hzumn0wd68ytnvv9hxgtcqyzjnd2cl0u7qzva64k7lgu4343adfdm5a4pjcxvf9pqex4e83z72qngxhfg versions before 2.4.2 is being actively exploited.\n\nIf you run BTCPay Server on nostr:nprofile1qyt8wue69uhh2mtzwfjkctnvda3kzmp6xsurgwqpzpmhxw309a6k6cnjv4kr5dpcxsuqqg829c7gzngg5du03fdcltkt9zzdqkz4jaw9ef94cf0z6munv2r0zsg8cnv5 , update immediately, then follow every step in this video to rotate your Lightning Node credentials (also see written instructions in the 2.4.2 release notes).\n\nUpdating alone is not enough.\n\nVideo by nostr:nprofile1qyg8wue69uhh2mtzwfjkcw358q6rsqgdwaehxw309ahx7uewd3hkcqpqmmu63dxnavjs7spkzsctx7m6ug0wlsm7lzqf9p4htc2h7mnzs5vqcyst3d \nOfficial advisory: https://x.com/BtcpayServer/status/2085865561137831938\n\n https://blossom.primal.net/f9476ca6d72cb5f7bae4e4a5d601fc6b0f8f688157054f3e57043db57e7dcd73.mp4 ",
"sig": "b9304a5ef4bceccf83841ba416b77674b58b3e269ebcd8e8f2f43f3471e2c3818b7ef6ebf15262e33e9f890cb56c4eb0aa0a980447aaf71c70a25453499fdb3a"
}