BTCPay urges Bitcoin merchants to replace wallets after hackers steal an estimated $1.6 million
BTCPay Server urged operators of installations running version 2.4.1 or earlier to replace their servers and wallets after attackers stole an estimated $1.63 million in Bitcoin and Litecoin. Bitquery traced 18.38 BTC and 3,405 LTC across 682 wallet sweeps from Oct. 30 to Nov. 2, but the number of affected merchants and total losses remain unconfirmed. The attacks exploited a vulnerability patched in August, and updating software may not be enough if attackers obtained credentials or wallet secrets. BTCPay recommends fresh server installations, new wallet seed phrases, transfers of remaining funds, and replacement of potentially exposed credentials. The project said servers already running version 2.4.2 or later were not affected in the reported attacks; externally stored spending keys, including hardware wallets, were also unaffected. Investigation is ongoing.
