Top Highlights
- BTCPay Server users on version 2.4.1 or earlier were targeted, with Bitcoin and Litecoin hot-wallet funds stolen.
- Upgrade to 2.4.7 and migrate to a clean server with a new wallet—even if no theft is apparent; treat old servers and secrets as compromised.
- Limit hot-wallet balances to funds needed for daily operations; keep the rest in a wallet with keys stored off-server.
- Broader crypto risks persist: Mercado Bitcoin reported a major breach and paused transactions, while Trezor warned of potentially tampered devices sold through resellers.
Older Servers Face Wallet Drains
Attackers have stolen Bitcoin and Litecoin from hot wallets linked to older BTCPay Server installations, the open-source payment platform says. The incidents involve servers running version 2.4.1 or earlier. BTCPay Server says the attackers used a method different from the flaw it fixed in version 2.4.2.
The company has not confirmed when the latest attacks began. Reports surfaced around November 1. It says it has received no credible reports of hot-wallet theft from users running version 2.4.7, which addresses additional security issues.
A hot wallet keeps funds online for quick access. That makes it useful for daily payments, but a compromised server can put those funds at risk. BTCPay Server’s warning shows the trade-off of managing payment systems yourself: greater control also brings greater responsibility for updates and security.
Update and Move Funds Safely
BTCPay Server urges anyone running version 2.4.1 or earlier to move to a new server and create a new wallet—even if they have not noticed missing funds. If theft or unauthorized access may have occurred, users should treat the whole machine and any secrets stored on it as compromised.
For routine operations, the company recommends keeping only the necessary spending funds on the server and storing the rest in a wallet whose keys stay off it. This approach can limit losses without preventing businesses from accepting cryptocurrency. Users should also check official channels for updates, especially if a hosting provider shuts down an older installation.
Continue Your Tech Journey
Learn how the Internet of Things (IoT) is transforming everyday life.
Stay inspired by the vast knowledge available on Wikipedia.
DataProtection-V1
