BTCPay Server Warns Users of Ongoing Hot Wallet Draining Attack

BTCPay Server has urged operators to shut down their instances after reports of an ongoing BTCPay Server hot wallet attack involving unauthorized transactions. The open-source Bitcoin payment processor issued an emergency warning on November 1, instructing users to stop their servers while its team investigates the incident and determines the extent of the reported losses. The project said attackers were sweeping hot wallets connected to BTCPay Server installations. It recommended keeping instances offline until further instructions. The warning did not identify a specific vulnerable version, configuration, or confirmed entry point behind the reported activity. The incident has raised concerns among businesses that use self-hosted Bitcoin payment infrastructure. BTCPay Server allows merchants to accept Bitcoin payments without relying on traditional payment processors.

BeCrypto News shows a short excerpt and links to the publisher. The full report belongs to TronWeekly.