This morning, my grandma died and I lost ~0.2 bitcoin. I feel devastated and embarrassed.
My grandma was old and lived a good life. She was a follower of Jesus. She was in a lot of pain and I'm glad she found relief. The hard part is watching my family grieve.
With the bitcoin loss, I only have myself to blame. Someone got a hold of my my lightning admin macaroon.
They closed the existing channels and swept the funds to their bitcoin address. I'll list the attacker's addresses below if anyone is interested. Although my systems were meticulously locked down, I wasn't as careful with passing around my admin macaroon between systems / different computers. It shouldn't have been an admin macaroon I was using in the first place -- another reckless mistake. I also didn't have enough monitoring in place. One silver lining is I happened to sweep quite a bit of funds out of my lightning node about a month ago. It would have been closer to 0.4 bitcoin had I not.
I had quite a few services that used the admin macaroon: BTCPay, a cashu mint, my website, etc.
I'm so sorry to anyone who had any amount of bitcoin with my mint. I will try to make amends, just reach out to me.
This is my fault and I only have myself to blame. Not just for my own losses, but for any losses by those who held bitcoin in my mint.
I'm not sure when I'll be ready to spin up my lightning node / cashu mint again.