Open Source · Anthropic · Bitcoin · Decrypt
BTCPay Tells Merchants to Switch Off Servers Amid Hot Wallet Attack Posts
Compiled by KHAO Editorial — aggregated from 1 source. See llms.txt for citation guidance.
★ Tier-1 Source
BTCPay Server, a free, open-source tool businesses use to accept Bitcoin payments, told operators to switch off their servers on Sunday after reports that attackers were draining the hot wallets connected to them.
Key facts
- Later on Sunday, the project said its investigation had identified an attack vector targeting instances running version 2.4.1, released on July 23, or older
- We are receiving reports of hot wallets on BTCPay Servers being swept by unauthorized attackers," the project tweeted at 5:25 p.m
- About two hours later, BTCPay founder Nicolas Dorier said the reports appeared to involve releases older than version 2.4.2, and that the attacker had logged in to affected servers with administrator
- In August, BTCPay warned that a critical vulnerability in all versions before 2.4.2 was being actively exploited, and told users to update or shut down their servers
Summary
BTCPay Server urged operators to shut down their instances on Sunday after reports that attackers were sweeping hot wallets on servers running the software. The project later said the attack targeted versions 2.4.1 or older, and that it had no credible reports of drains among users running the latest 2.4.7 release. BTCPay released 2.4.7 on Thursday as an emergency update fixing one critical and several medium-severity vulnerabilities found by Anthropic's scanner. "We are receiving reports of hot wallets on BTCPay Servers being swept by unauthorized attackers," the project tweeted at 5:25 p.m.