Skip to content
NewA calmer, faster ZeroHour
Exploit / PoChighExploited in the wild

BTCPay Server warns of hot wallet drains

Original title: Hackers Drain Bitcoin Hot Wallets on BTCPay Servers, Users Urged to Shut Down Immediately

Cyber Security Newsby Guru Baran ()3 min read1
Part of a story covered by 2 sourcesBTCPay Server Warns of Hot Wallet Drains on Outdated VersionsMerged summary & timeline
AI summary · x-ai/grok-4.7Summaries by Vani AI

Operators urged to shut down BTCPay Servers immediately after reports of Bitcoin hot wallet drains.

BTCPay Server issued an urgent warning after receiving reports of attackers draining hot wallets on its servers. The open-source payment processor instructed operators to run ./btcpay-down.sh and keep installations offline while it investigates. Early findings point toward outdated versions older than 2.4.2 with possible administrator login, though the initial access method remains unconfirmed.

Unconfirmed: How attackers gained administrator access and full scope of affected installations unconfirmed

Key facts
  • Affected installations older than 2.4.2
  • Public servers on version 2.4.7 not reported as attacked
  • No confirmed loss total or number of affected instances
  • Run ./btcpay-down.sh until investigation completes
  • Recent patches in 2.4.7 not linked to this incident
Security assessment · AI, from the articleExploited in the wild

Impact: Stealing Bitcoin from hot wallets on affected BTCPay Servers

What to do
  1. 1.Shut down server with ./btcpay-down.sh until investigation complete
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

From the original article

3 min read at cybersecuritynews.com

BTCPay Server has issued an urgent warning after receiving reports that attackers were draining Bitcoin hot wallets on its servers. The open-source payment processor told operators to shut down their installations immediately and keep them offline while its team investigates the thefts. The alert raises concerns for merchants holding funds in wallets managed through affected […]

Cyber Security News

By Guru Baran · cybersecuritynews.com

Read the full article at Cyber Security News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.