BTCPay Server warns of hot wallet thefts running on outdated software
BTCPay Server urged operators to shut down their servers after receiving reports of unauthorized attackers draining funds from hot wallets.
BTCPay Server urged operators to shut down their servers after receiving reports of unauthorized attackers draining funds from hot wallets.
BTCPay Server has identified an attack vector affecting older versions of its payment software after receiving reports of attackers draining funds from users’ hot wallets.
On Monday, the Bitcoin payment platform said its investigation identified an attack vector targeting instances running version 2.4.1 or earlier, which was released July 23, 2026.
The findings followed an earlier warning, in which BTCPay urged operators to shut down server instances while it investigated the unauthorized wallet withdrawal reports. It also shared instructions for operators to shut down their servers.