BTCPay Tells Merchants to Switch Off Servers Amid Hot Wallet Attack Reports
Summary
BTCPay Server urged operators to shut down their instances after reports that attackers were draining connected hot wallets. Its investigation identified a targeting vector affecting versions 2.4.1 and older, while the project said it had no credible reports of drains on the latest 2.4.7 release. Some hosting providers automatically disabled outdated servers. BTCPay has not disclosed how many instances were affected or the amount of Bitcoin stolen, and has not confirmed whether the attacks exploited vulnerabilities fixed in the recent 2.4.7 emergency update. The self-hosted payment software requires merchants to secure and update their own servers.
