BTCPay Server told users to shut down their instances after reports of hot wallets being drained, identifying the attack vector as affecting versions 2.4.1 and older.
BTCPay Server urged operators to shut down their servers after receiving reports of unauthorized attackers draining funds from hot wallets.
The team urges operators to update and says it has no credible reports of drains on the latest 2.4.7 release.... Read the full story at The Defiant
The open-source project says it is still investigating and hasn't given a loss figure or announced a fix. Its founder said the reports appear to involve versions older than 2.4.2.
Operators were told to run ./btcpay-down.sh while the project investigates. The alert did not identify affected versions or announce a patch.... Read the full story at The Defiant
First reported:
First saved on ClustZ:
Coverage updated:
We use cookies to improve your experience and analyze site traffic. By clicking "Accept", you agree to our use of cookies. See our Privacy Policy.