BTCPay Server vulnerability: about $1.63M traced to theft-linked addresses

A vulnerability in BTCPay Server was leveraged by attackers to empty hot wallets on installations that had not been updated, and Bitquery linked roughly $1.63 million in Bitcoin and Litecoin to wallet addresses tied to these incidents. According to BTCPay Server’s incident update from November 2, the breaches affected versions 2.4.1 and earlier, despite a patch having existed since August 7. Key takeaways The attacks targeted BTCPay Server versions 2.4.1 and older. Bitquery tracked 682 wallet sweeps between October 30 and November 2. Affected operators were told to rebuild with fresh wallets and seeds. BTCPay Server vulnerability exploited through administrator access The attacker logged into affected servers as an administrator and emptied their hot wallets, according to Bitquery’s analysis.

BeCrypto News shows a short excerpt and links to the publisher. The full report belongs to The Cryptonomist.