u/viktorivpn

On 7 August a critical BTCPay vulnerability was exploited to steal Bitcoin from our Lightning node.

The funds were ours: no customer data accessed, no customer funds lost, no action needed. The server keeps no request logs, so no payment records were exposed.

Full report on our blog.

We are performing a hardware upgrade to improve stability and performance of our Helsinki server. No ETA as of yet as we are waiting on the data center to wrap up the process - I will update the thread when it's done.

Due to a recently disclosed vulnerability in BTCPay Server we are performing an unplanned maintenance and update.

Portmaster 2.2.1 adds Split Tunneling: the ability to route specific apps or connections through a different network interface, overriding the route your operating system would normally use. If a VPN or SPN is handling your default traffic, Split Tunneling lets you carve out exceptions.

Some use case examples:

• Bypass VPN overhead for latency-critical apps such as games or video calls, sending them over a direct connection instead
• Send a streaming app over your direct ISP connection instead of a VPN exit in another country
• Keep a work app on a dedicated connection while everything else uses your home network

When using Split Tunnel, Portmaster applies the override automatically. Follow these steps:

1. Enable the Split Tunnel module in Portmaster’s global settings
2. Turn on Use Split Tunnel for the app you want to redirect

You can set this globally as a default or override it per app, and add rules to include or exclude specific domains for finer control. Portmaster intercepts the app’s outgoing connections in the background and re-establishes them over the chosen interface; the app itself needs no configuration.

Worth noting: traffic routed this way bypasses SPN or VPN encryption and exits under your regular IP address, so it only makes sense for apps and destinations where that trade-off is acceptable.

Split Tunneling is available now for Windows and Linux users running Portmaster 2.2.1 or later. Full configuration details, including per-app rules and how Split Tunneling interacts with SPN and VPNs, are documented on the wiki.

Questions about Split Tunneling? Check the wiki first, or reach out through Safing’s support channels.

We are investigating an infrastructure related issue that affects the SPN and signups + account management on safing.io. We will post updates to this thread when available. Thanks for your patience.