BTCPay Server Traces Hot Wallet Drains to Older Versions After Emergency Shutdown

TL;DR BTCPay Server urged operators to shut down instances after reports of unauthorized attackers sweeping connected hot wallets, while investigators worked to identify the attack vector. The investigation later narrowed exposure to version 2.4.1 and older. BTCPay said it had no credible drain reports involving version 2.4.7. Attackers obtained administrator access on affected servers, but the entry method remains unresolved. BTCPay has not yet publicly disclosed total losses or victim numbers. BTCPay Server urged operators to shut down their instances after receiving reports that unauthorized attackers were sweeping Bitcoin from connected hot wallets . In an official security alert , the project told users to run its shutdown command while the investigation continued.

BeCrypto News shows a short excerpt and links to the publisher. The full report belongs to Crypto Economy.