
Hackers Exploit BTCPay Server Flaw to Steal Bitcoin and Litecoin
BTCPay Server 2.4.1 and earlier hot wallets targeted by attackers using .macaroon credential files; latest version 2.4.7 unaffected.
18 stories, newest first · one card per story

BTCPay Server 2.4.1 and earlier hot wallets targeted by attackers using .macaroon credential files; latest version 2.4.7 unaffected.

Attackers used a compromised developer laptop and Ethereum delegation to drain $6.3B from Binance hot wallet in 20 minutes.

Tracing firms suspect North Korea’s TraderTraitor, which Binance has not confirmed; about $2.8 billion, mostly stablecoins, has been frozen.

The supplied page is mostly site navigation, so how the wallets were taken and whether Binance confirmed the loss are not stated.

Binance will cover user losses, and close to $3 billion has already been frozen on-chain.

Binance says it will cover losses; a preliminary laptop compromise and multi-billion-dollar freezes remain under investigation.

Tether and Circle say they froze more than $2.3 billion linked to the reported incident; Binance has not confirmed theft.

Bitget confirms attackers stole $387.5 million using zero-days in two third-party security appliances, deploying web shells and a custom withdrawal tool against hot wallets.

Bitget resumed Bitcoin withdrawals after a third-party security product flaw let attackers steal $387.5M in unauthorized transfers from hot/warm wallets.

Attackers compromised Bitget's backend wallet infrastructure on September 24, stealing $387.5 million; ZachXBT exposed DPRK-linked launderers seeking swap help in public chats.

Bitget resumed Bitcoin withdrawals after a suspected North Korean theft of $387.5 million.

Bitget says suspected North Korea-linked hackers stole $351.6 million from hot and warm wallets.

Bitget says attackers stole about $351.6 million from hot wallets using methods resembling North Korean hackers.

Suspected North Korean hackers stole about $351 million in crypto from Bitget hot wallets.

Duelbits confirmed a hot-wallet breach that drained about $7 million and took the casino offline.

Bitget confirmed unauthorized hot-wallet transfers totaling about $351.6 million and suspended withdrawals.

Duelbits confirmed a roughly $7 million hot-wallet theft and took the crypto casino offline.

Bitget confirmed a $351.6 million theft from hot and warm wallets while cold storage stayed secure.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views