BTCPay Server warns of hot wallet thefts running on outdated software
Summary
BTCPay Server says an attack vector affects versions 2.4.1 and earlier after reports of attackers draining users’ hot wallets. The project reported no credible drain reports from users on version 2.4.7 and urged operators to update; it had previously advised shutting down instances during its investigation. BTCPay has not disclosed how many operators were affected, the amount stolen or technical details, and is seeking logs from affected users. It is unclear whether the incident is linked to an August attack that exposed Lightning Network Daemon credentials.
