Covered by 2 outlets — first reported by BleepingComputer, Nov 2, 15:03 UTC
BTCPay Server warns of hot wallet crypto thefts on outdated instances
Summary
The maintainer of BTCPay Server, an open-source, self-hosted cryptocurrency payment processor, has urged users to install the latest version after attackers drained Bitcoin and Litecoin from hot wallets (wallets kept online) on instances running older software. BTCPay Server says its investigation found the attacks targeted servers running version 2.4.1, released on 23 July 2026, or earlier.
AI summary by the SecurityTabs newsroom, checked against BleepingComputer, The Hacker News. Read the outlets below for the full story.
Continue reading
2 outlets, in the order they reported it.
BleepingComputerFirst report
BTCPay Server warns of hot wallet crypto thefts on outdated instances
The maintainer of BTCPay Server, an open-source cryptocurrency payment processor, has urged users to install the latest version as hackers have been draining "hot wallets" on instances running older versions.
The Hacker News
Hackers Exploit BTCPay Server Flaw to Steal Bitcoin and Litecoin From Hot Wallets
BTCPay Server, a self-hosted, open-source cryptocurrency payment processor, has urged users to install the latest version of its software in response to reports of Bitcoin and Litecoin being stolen from hot wallets on instances running…
Explained
The technology and terms in this story. Learn more