BTCPay Server released version 2.4.5 on October 5, 2026, with lead developers Nicolas Dorier and Pavlenex credited for the work. This update hardens security by adding protections against SSRF attacks on Lightning and LNURL outbound requests as well as invoice webhooks. Refund permissions have been tightened and public invoice details will now be hidden one month after issuance. Tor support becomes optional, requiring existing users to manually re-enable it after updating to keep their onion address reachable. The Docker deployment was also simplified with the removal of several unmaintained older integrations including Bitcoin Plus, Trezarcoin, and JoinMarket.
Source: Read the original article

