BTCPay

Attackers are exploiting a vulnerability in BTCPay Server, a popular self-hosted cryptocurrency payment processor, to steal funds from merchants' hot wallets holding Bitcoin and Litecoin. The security flaw allows unauthorized access to wallet keys on compromised servers. Merchants running BTCPay Server are being urged to update their installations immediately and review wallet balances for suspicious activity.

BTCPay Server says attackers stole Bitcoin and Litecoin from hot wallets on servers running version 2.4.1 or earlier. The open-source payment processor is urging operators of those versions to sweep remaining funds and migrate to freshly built servers running the latest release. The warning has spread quickly among self-custody and infosec communities, who are debating whether the breach came from a supply-chain compromise or a vulnerability in older deployments.

BTCPay Server has issued a warning that attackers are stealing funds from hot wallets running on outdated instances of its open-source cryptocurrency payment platform. The organization is urging users to update their servers immediately to patch the vulnerability being exploited. Security observers are amplifying the alert across cybersecurity communities.

Self-hosted BTCPay Server instances running version 2.4.1 or older are being attacked, with intruders logging in as admin and draining hot wallets of BTC and LTC. A fix shipped in version 2.4.7, released as an emergency update after Anthropic's Frontier OSS scanner flagged the vulnerability. Administrators running outdated versions are urged to upgrade immediately.

BTCPay Server, an open-source Bitcoin payment infrastructure provider, has reportedly suffered an attack involving unauthorised transfers from hot wallets. Versions 2.4.1 and earlier are said to be affected, while version 2.4.7 is not listed as vulnerable. The news circulated alongside reports of a $6.3 billion blow to Binance, adding to anxiety across the crypto community about exchange and wallet security.

BTCPay, an open-source bitcoin payment processor, has urged users to switch off their servers following reports that wallets connected to the software were drained. The warning affects merchants and individuals running the tool on their own servers. Users are being told to take systems offline while the cause is investigated, and the incident has raised fresh concerns about self-hosted crypto payment security.

BTCPay Server has reported thefts from hot wallets on older self-hosted payment server installations, with its investigation pointing to versions 2.4.1 and earlier. The project says no credible cases were reported on version 2.4.7 at the time of its update. It initially advised operators to shut down their instances and later urged further protective steps.

BTCPay Server has warned that older versions of its open-source bitcoin payment software are vulnerable to theft of funds, urging operators to update to version 2.4.7 or shut down affected servers immediately. The alert is circulating among bitcoin users and self-hosting communities, who are passing on the warning to prevent losses.

BTCPay Server, an open-source Bitcoin payment processor, has warned administrators that attackers are stealing funds from hot wallets on instances running outdated software. The warning, reported by BleepingComputer, urges merchants and node operators to update their servers immediately and secure their wallet keys. The incident highlights ongoing security risks for self-hosted crypto payment infrastructure.

BTCPay Server has issued an emergency update, version 2.4.7, after attackers gained admin access and drained hot wallets on instances running version 2.4.1 or older. The flawed component has not been disclosed. The vulnerability was found by Anthropic's open-source scanner, and version 2.4.2 had already patched an exploited LND credential leak. Administrators are urged to upgrade immediately.

BTCPay Server, the open-source bitcoin payment processor, has told self-hosted operators to take their servers offline following reports of bitcoin hot wallet drains. Outlets are comparing coverage of the incident, which raises questions about vulnerabilities in self-custodied payment infrastructure and how quickly affected users can secure their funds.

Reports link a wave of Bitcoin payment server hot-wallet drains to BTCPay Server versions 2.4.1 and older. Users running the self-hosted payment processor are being urged to check their version, secure or empty hot wallets, and upgrade immediately. The warning is spreading across crypto security channels as merchants assess whether funds were taken from exposed servers.

An apparent security incident affecting BTCPay Server has led to reports that Bitcoin hot wallets connected to self-hosted servers were drained. Administrators are being urgently advised to take their servers offline while the issue is investigated. The self-hosted payment platform is widely used by merchants accepting bitcoin, so any exploit raises immediate concerns about lost funds and unpatched vulnerabilities.