BTCPay Server restricted remote LND access after a critical exploit exposed Lightning credentials, drained nodes and forced an urgent v2.4.2 update.