BTCPay restricts remote Lightning access after attackers steal funds Foundation and Citadel21 reported drained Lightning nodes, but the total amount stolen and number of affected operators remain unknown.