BTCPay Server issues emergency shutdown warning amid hot wallet attacks

BTCPay Server called on operators to shut down their instances on Sunday after learning that unauthorized parties were accessing and draining hot wallets. In an announcement on X, the project requested that all instance administrators take their platforms offline using the shutdown command pending the investigation’s conclusion. The project, however, has yet to reveal the root cause, the number of affected servers, or the total amount stolen. BTCPay Server has suffered two other incidents recently BTCPay Server shared on X: “We are receiving reports of hot wallets on BTCPay Servers being swept by unauthorized attackers. If you’re running an instance, please shut it down (./btcpay-down.sh) until we complete the investigation.” Given that BTCPay is self-hosted, the task of turning it off falls squarely on the owners of the individual servers.

BeCrypto News shows a short excerpt and links to the publisher. The full report belongs to Cryptopolitan.