BTCPay has asked merchants using its Bitcoin payment software to rebuild outdated servers and replace their wallets after the theft of 18.38 BTC and 3,405 LTC, estimated at $1.63 million. Bitquery tracked 682 wallet sweeps between October 30 and November 2, including approximately $150,000 in transfers after BTCPay’s November 1 security warning. According to BTCPay, installations running version 2.4.2 or later were not affected, while wallets whose spending keys were stored outside the server remained safe. The project said, however, that updating the software is insufficient if attackers have already obtained administrative access, credentials or wallet secrets. Operators must create a new wallet with a fresh seed phrase, transfer any remaining funds, replace their credentials and install the latest version on a new virtual machine.
Source: Read the original article
