BTCPay Server hot wallet breach: shutdown urged
6.6 Security BTCPay Server urges immediate shutdowns after hot wallet drains on outdated versions. Users should update to 2.4.7 or shut down servers as investigations continue.
BTCPay Server, an open-source Bitcoin payment processor, has issued urgent alerts after reports of unauthorized draining of hot wallets on multiple server instances. Operators are instructed to immediately shut down their servers using './btcpay-down.sh' while investigations continue. The incidents primarily affect versions prior to 2.4.2, where attackers reportedly gained administrator access. The 2.4.2 update, released in August, addressed a critical vulnerability, and subsequent versions have included further security patches. Users are strongly advised to update to the latest version (2.4.7) or shut down their instances if unable to upgrade. The attack appears linked to unpatched security flaws rather than a new vulnerability. The BTCPay Server team continues to provide updates and urges all operators to review their security measures.
