BTCPay Server asked operators to temporarily shut down their instances after reports that unauthorized attackers were draining connected hot wallets. The project said the attack targeted versions 2.4.1 and earlier, while no credible wallet-drain reports had been received for version 2.4.7. Released on Thursday as an emergency update, version 2.4.7 fixes one critical vulnerability and several medium-severity flaws identified by Anthropic’s security scanner. The attack vector reportedly involved an attacker obtaining administrator access to affected servers, but BTCPay did not disclose how many servers were affected or how much Bitcoin was stolen.
Source: Read the original article
Disclaimer: this content is for information purposes only and is not financial advice. Cryptocurrencies are highly volatile: you may lose all of your capital. Always do your own research. Legal notice
