BTCPay Server asked operators to temporarily shut down their servers on November 1 after reports of unauthorized withdrawals from merchants’ hot wallets. Investigators identified an attack vector affecting version 2.4.1 and earlier, while no credible reports of wallet drains have emerged for version 2.4.7, released on October 29. That update addresses 85 security findings, including one critical vulnerability and 13 rated high severity, but the project has not established that every theft resulted from these specific flaws. The total value of stolen Bitcoin, the number of compromised installations, and the exact method used to gain administrator access remain unconfirmed.
Source: Read the original article
Disclaimer: this content is for information purposes only and is not financial advice. Cryptocurrencies are highly volatile: you may lose all of your capital. Always do your own research. Legal notice
