BTCPay Server urges operators to shut down after hot-wallet drains hit versions 2.4.1 and earlier

Bitcoin payment processor BTCPay Server urged operators to run ./btcpay-down.sh and stay offline during its investigation, citing reports of hot-wallet drains. The company said the attack vector it identified targeted instances running version 2.4.1 or older, and that it has no credible reports of drains on the current version; no patch was announced.

Detected & updated continuously · Source: Nebula