According to CoinMeta, supporters of btcpay and server have announced a bounty for the recovery of funds related to a recent security vulnerability. A reward of 10% of the recovered amount will be given, with a maximum payout of 3 BTC in case all funds are recovered. It was previously disclosed that versions prior to 2.4.2 contained a serious vulnerability that allowed attackers to obtain the administrator lnd credentials and control associated Lightning Network wallets without affecting other wallets on the chain. The project team has not yet disclosed the total amount of losses or the number of affected nodes, but they have stated that they will strengthen code scanning and security reviews.