BTCPay Server flaw: Immediate update required

BTCPay Server urges users to update to version 2.4.2 immediately due to a critical vulnerability. If unable to update, shut down servers to protect funds. Full details are forthcoming.

BTCPay Server has issued an urgent security advisory after discovering a critical vulnerability that is currently being actively exploited. This flaw puts users’ Bitcoin funds at significant risk. Administrators are strongly advised to update their servers to version 2.4.2 immediately via the admin dashboard and confirm the update by checking the version number in the footer. If an immediate update is not possible, it is recommended to shut down the server to prevent unauthorized access. The vulnerability could allow attackers to bypass two-factor authentication and access funds. Security researchers responsibly disclosed the issue, and a related update to NBXplorer is also advised. Users with on-chain hot wallets should move their funds and recreate wallets as a precaution. The full extent of the exploit and any financial losses have not yet been revealed, with a detailed technical report expected soon. This incident has raised further concerns in the crypto community, especially after recent wallet vulnerabilities.