An actively exploited flaw in versions before 2.4.2 let attackers obtain LND admin macaroons and reach connected Lightning wallets. On-chain wallets were not affected.
Pirates · Hack or exploit
BTCPay Server boarded by pirates
Sources
Logged . Corrections are printed, not silently fixed.