NewsMeter

BTCPay Server backers offer up to 3 BTC recovery bounty following critical exploit

8/11/2026

Up to 3 $BTC is posted as a recovery bounty after BTCPay Server, an open-source Bitcoin payment processor, disclosed a critical exploit.

BTCPay said AI may have been used to exploit the vulnerability, and credited Craig Raw and the Bitcoin Red Team fund with reporting the issue. The funds come from supporters, not a named corporate treasury.

Who surfaced the issue Craig Raw and the Bitcoin Red Team fund are the credited reporters. BTCPay named both in its disclosure.

That external parties identified the vulnerability is the key structural fact here: the path ran from outside researchers to BTCPay, then to the public record.