DECRYPT · 2026-11-02 12:24 UTC

BTCPay Tells Merchants to Switch Off Servers Amid Hot Wallet Attack Reports

BTCPay Server, an open-source Bitcoin payment tool, advised operators to shut down their servers after reports of attackers draining hot wallets connected to instances. The attack targeted versions 2.4.1 and older; attackers gained administrator access to affected servers. Version 2.4.7 (latest) showed no credible reports of hot wallet drains. BTCPay released emergency update 2.4.7 on Thursday fixing critical and medium-severity vulnerabilities; the project has not disclosed how many servers were affected or how much Bitcoin was stolen.

Loading the story on Tree News…