BTCPay Server users hit again as losses near 20 BTC
BROBROK News · Based on reporting by Livecoins ·
BTCPay Server developers said users have been targeted again in thefts involving hot wallets on servers running older versions of the software. The project’s founder said the losses are close to 20 BTC and urged users to update to version 2.4.7 and move funds to new wallets.
Key points
- Reports involve Bitcoin and Litecoin stolen from hot wallets on BTCPay Server instances.
- Affected users were reportedly running version 2.4.1 or earlier.
- The team said attackers used a different method to exploit a flaw fixed in 2.4.2.
- Users were told to upgrade to version 2.4.7.
- The guidance also includes moving funds, setting up a new virtual machine, and rotating passwords and exposed keys.
Why it matters
The incident highlights the risk of leaving payment software unpatched, especially when hot wallets are involved. It also shows that updating alone may not be enough if an attacker already gained partial access to a system.
Original headline: “Usuários do BTCPay Server são atacados novamente e perdas chegam a 20 bitcoins”
Read the original on Livecoins
Summary and analysis written by BROBROK News from the original report. Read the full story on the source website. Not investment advice.