BTCPay Server identified an attack vector targeting installations running version 2.4.1 or earlier, which was released on July 23, 2026. According to the Bitcoin payment platform, unauthorized attackers drained funds from the hot wallets of some operators. No credible thefts have been reported among users running version 2.4.7, which the team recommends installing. The number of affected operators, the amount stolen and technical details about the intrusion remain undisclosed. The warning comes less than three months after an attack against Lightning Network Daemon that led BTCPay to restrict remote access to the Lightning Network.
Source: Read the original article


