BTCPay urges operators to shut down servers after attack reports
BROBROK News · Based on reporting by Decrypt ·
BTCPay Server told operators to power down their instances after reports that attackers were sweeping hot wallets connected to the software. The project later said the issue appeared to affect version 2.4.1 and earlier, and that it had no credible reports of drains on users running 2.4.7.
Key points
- BTCPay asked users to shut down instances during the investigation.
- The reports involved hot wallets tied to self-hosted BTCPay servers.
- The project said the attack vector targeted version 2.4.1 or older.
- It said there were no credible drain reports for version 2.4.7.
- BTCPay released 2.4.7 as an emergency security update.
Why it matters
BTCPay is used by merchants to accept Bitcoin payments, so any compromise of hot wallets can put funds at risk. The incident also highlights the security burden that comes with self-hosted payment infrastructure.
Original headline: “BTCPay Tells Merchants to Switch Off Servers Amid Hot Wallet Attack Reports”
Summary and analysis written by BROBROK News from the original report. Read the full story on the source website. Not investment advice.