BTCPay Server hot wallet thefts target outdated instances
Original title: BTCPay Server warns of hot wallet thefts targeting outdated instances
Attackers drain hot wallets on instances running version 2.4.1 or earlier; update to 2.4.7 urged.
BTCPay Server identified an attack vector allowing administrator login on versions older than 2.4.2, leading to hot wallet drains. The maintainer urges updating to 2.4.7. No attacks reported on the latest 2.4.7 release.
- Attack targets versions 2.4.1 and earlier
- Update to 2.4.7 recommended
- Investigation ongoing
- Previously warned about flaw in 2.4.2
- No credible reports for latest version
Impact: unauthorized access to and theft from hot wallets
- 1.Update BTCPay Server to version 2.4.7
- 2.Shut down outdated instances immediately
- Vendors
- BTCPay
- Products
- BTCPay Server
From the original article
2 min read at bleepingcomputer.com
The maintainer of BTCPay Server, an open-source cryptocurrency payment processor, has urged users to install the latest version as hackers have been draining "hot wallets" on instances running older versions. [...]
By Bill Toulas · bleepingcomputer.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.