TREE NEWS update: BTCPay Server released version 2.4.5, tightening Lightning and LNURL security and improving invoice generation performance. The update makes Tor optional in Docker deployments, narrows exposure of the public Lightning API, and removes several deprecated or unmaintained integrations, with server administrators advised to update. The Plugin Builder, previously suspended after a server breach, has reopened with builds running in an ephemeral isolated sandbox plus build-output validation and admin audit logs.
BTCPay Server Releases 2.4.5 Security Update, Makes Tor Optional in Docker
The reopening of the Plugin Builder matters more than the version bump: builds now run in an ephemeral isolated sandbox with output validation and admin audit logs, a direct architectural response to the earlier server breach. Making Tor optional in Docker lowers the operational barrier for merchants who found onion-only setups impractical, though it shifts privacy responsibility to the deployer. Whether third-party plugins regain maintainer trust, and whether the narrowed public Lightning API breaks existing integrations, are the open questions.
Generated by AI for reference only.
Share on WeChat
Open WeChat → Scan → then tap "…" to send to a chat or Moments.
Tap "…" in the top-right corner to send to a chat or share to Moments.