Other attacks on Bitcoin

A flaw in all pre-1.7.0 versions of the self-hosted LNbits Lightning wallet software let attackers drain Bitcoin from independent installations.

Attackers abused a pre-2.4.2 vulnerability to gain admin access to outdated self-hosted BTCPay Server instances and swept roughly $1.6M in BTC and LTC from merchant hot wallets.

An attacker chained six bugs in MAYAChain's trade-account and outbound logic to fabricate a CACAO subsidy and drain about $1.7 million in Bitcoin and other assets from Maya Protocol.