BTCPay Server Warns of Hot Wallet Drains Affecting Older…
By Abdelaziz Fathi
AI summary of the source article
BTCPay Server has urged Bitcoin merchants and payment operators to update their software after attackers gained administrator access to older installations and drained connected hot wallets. The vulnerability affects instances running version 2.4.1 or earlier.
Why it matters
The distinction matters because BTCPay Server allows merchants to process Bitcoin payments without relying on a centralized payment custodian.
Key facts
- Attackers gained unauthorized administrator access to BTCPay Server installations running version 2.4.1 or earlier and drained funds from connected hot wallets.
- The project reported no credible evidence of wallet drains on its latest release, version 2.4.7.
- BTCPay has not disclosed the total number of affected installations or the value of stolen funds.
Source excerpt · FinanceFeeds
BTCPay Server has warned Bitcoin merchants and payment operators to update their software after attackers gained unauthorized access to older installations and drained funds from connected hot wallets. The incident has exposed risks associated with outdated self-hosted payment infrastructure, less than three months after a separate vulnerability led to thefts from Lightning Network nodes. In a Nov…