BTCPay Server Hack Raises Alarm Over Bitcoin Wallet Security

Trusted Editorial content, reviewed by leading industry experts and seasoned editors. Ad Disclosure A BTCPay Server hack has raised fresh security concerns after the Bitcoin payment platform received reports of attackers withdrawing funds from merchants’ hot wallets. On November 1, the open-source project issued an emergency warning, asking operators to temporarily shut down their payment servers while its team investigated the incidents. The situation is particularly concerning for businesses that use BTCPay Server to accept Bitcoin without relying on traditional payment intermediaries. As the investigation develops, we’re learning more about which software versions may be vulnerable and why keeping cryptocurrency payment infrastructure updated is essential. TL;DR BTCPay Server warned operators to shut down their installations after receiving reports of unauthorized Bitcoin hot wallet withdrawals. Investigators identified an attack vector affecting version 2.4.1 and earlier, while no credible wallet-drain reports have emerged for version 2.4.7. The total amount stolen, number of affected merchants, and exact method attackers used to gain access remain unconfirmed. BTCPay Server Ha...