Is Your BTCPay Server Safe? What the Hot Wallet Drain Investigation Shows

Attackers gained admin access to outdated BTCPay Server instances and swept their hot wallets, and traces point to flaws that predate an August patch. The damage falls on operators who never updated, and the team has yet to disclose the total losses. BTCPay Server is a free, open-source payment processor that merchants host themselves to accept Bitcoin. In a hot wallet setup, the server stores the private keys itself, which lets the software send funds without the operator signing each transaction. As a result, anyone with admin access to such a server can move its coins. Which Versions Did the Attackers Target? The BTCPay Server team first raised the alarm late on Nov. 1. It asked every operator to shut down their instance until the investigation ends.

BeCrypto News shows a short excerpt and links to the publisher. The full report belongs to BeInCrypto.