BTCPay Server warns of wallet drains, urges server shutdowns

BTCPay Server has warned users to shut down their payment servers after receiving reports of attackers gaining unauthorized access to older installations and draining funds from connected Bitcoin hot wallets. Summary BTCPay Server has urged operators to shut down their payment servers after receiving reports of attackers gaining unauthorized access and draining funds from connected Bitcoin hot wallets. The project’s investigation identified an attack vector affecting installations running version 2.4.1 or older, while the latest 2.4.7 release has no credible reports of wallet drains. BTCPay Server co-founder Nicolas Dorier said attackers had managed to log in with administrator privileges on affected instances, although investigators have yet to determine how they obtained access. Hosting providers, including LunaNode, have taken precautionary action to shut down some installations, while affected users have been asked to submit incident details and server logs. BTCPay Server has not disclosed the total amount of cryptocurrency stolen or the number of compromised servers, and its investigation remains ongoing. In a November 2 security alert, the open-source Bitcoin payment processo...