BTCPay Server urges update to 2.4.7 after hot-wallet drains hit versions before 2.4.2

Bitcoin payment processor BTCPay Server urged operators to run ./btcpay-down.sh and update to 2.4.7 after hot-wallet drains. Its investigation shows attackers exploited an old vulnerability patched months ago in version 2.4.2 (Aug 7) to steal from on-chain hot wallets. It says it has no credible reports of drains on 2.4.7; no patch was announced.

Detected & updated continuously · Source: Nebula