Hackers Drain Bitcoin Hot Wallets on BTCPay Servers, Users Urged to Shut Down Immediately

What happened?

BTCPay Server has issued an urgent warning after receiving reports that attackers were draining Bitcoin hot wallets on its servers. The open-source payment processor told operators to shut down their installations immediately and keep them offline while its team investigates the thefts. The alert raises concerns for merchants holding funds in wallets managed through affected servers.

Key details

• BTCPay Server issued an urgent warning after reports of hot wallets being drained by unauthorized attackers.
• Early findings suggest affected servers were running versions older than 2.4.2 and attackers had administrator access.
• The initial entry point for attacker access remains unconfirmed despite administrator login being observed.
• BTCPay Server's public servers running version 2.4.7 have not been attacked, but this does not guarantee all updated installations are safe.
• No confirmed total loss or count of affected installations has been provided in available reports.

Summarised by SecOraLens from Cyber Security News. Always read the original source before acting. How SecOraLens verifies advisories.