BTCPay Server Issues Urgent Warnings After Hot Wallet Theft Incidents

11/02/2026

BTCPay Server told users to shut down their instances after reports of hot wallets being drained, identifying the attack vector as affecting versions 2.4.1 and older.

11/02/2026

BTCPay Server called on operators to shut down their instances on Sunday after learning that unauthorized parties were accessing and draining hot wallets. In an announcement on X, the project...

11/02/2026

A BTCPay Server hack has raised fresh security concerns after the Bitcoin payment platform received reports of attackers withdrawing funds from merchants’ hot wallets. On November 1, the...

11/02/2026

The open-source project says it is still investigating and hasn't given a loss figure or announced a fix. Its founder said the reports appear to involve versions older than 2.4.2.

11/02/2026

The team urges operators to update and says it has no credible reports of drains on the latest 2.4.7 release.... Read the full story at The Defiant

11/02/2026

BTCPay Server founder Nicolas Dorier said hot-wallet sweeps appear to hit servers older than 2.4.2, where an attacker logged in as admin.

11/01/2026

Operators were told to run ./btcpay-down.sh while the project investigates. The alert did not identify affected versions or announce a patch.... Read the full story at The Defiant