BTCPay Server Hack: Bitcoin Hot Wallets Drained, Shut Your Server Down Now

The information provided in this article is for informational purposes only and does not constitute financial advice. Cryptocurrency investments carry a high degree of risk. Always conduct your own research.BTCPay Server warns of swept Bitcoin hot wallets on older installs and tells operators to shut down. What happened, who is affected and what to do now.Add as a preferred source on GoogleFollow on Google NewsIf you run a $Bitcoin payment server, stop reading after this sentence and go switch it off. BTCPay Server, the most widely used self-hosted Bitcoin payment processor, has confirmed that attackers are sweeping hot wallets on older installations and has asked every operator to take their instance offline until the investigation is complete.What happened to BTCPay Server?Late on Saturday, 1 November, the BTCPay Server team posted an emergency alert: it was receiving reports of hot wallets connected to BTCPay instances being emptied by unauthorized attackers. The instruction was blunt. Shut your server down with the ./btcpay-down.sh script and wait.By Sunday, the incident response team had narrowed the attack vector. According to the project, the affected installations run versi...