BTCPay Server warns of hot wallet drains on outdated installations
Image: Crypto.newsBTCPay Server reported attackers accessing admin accounts on older installations and draining Bitcoin hot wallets. The vulnerability affects versions 2.4.1 and earlier. No credible drains have been reported for the current 2.4.7 release. The team urged operators to shut down servers and update while investigations continue. Total losses and compromised server count remain undisclosed.
Key points
- Attackers gained administrator access to BTCPay Server instances running version 2.4.1 or older and swept connected Bitcoin hot wallets.
- The project urged all operators to shut down their servers and update to the latest version while the investigation continues.
- Total cryptocurrency stolen and the number of compromised servers have not been disclosed.
- This is the second reported hot‑wallet breach in three months targeting versions older than 2.4.2.
Why it matters
Operators of self‑hosted BTCPay Server must ensure their software is up to date to avoid unauthorized fund withdrawals. The incident highlights risks of running outdated payment infrastructure.
What's unclear
The exact method attackers used to obtain administrator access has not been determined.
The total amount of Bitcoin stolen in the recent drains has not been disclosed.
Price context · BTC
At publication
$78,110.00
Now
$77,922.00
Change since
−0.24%
7 days · dashed line = publication
Sources · 4 publishers
BTCPay, a bitcoin payment tool, tells users to switch off their servers after reports of drained wallets
Crypto.news
Tier 2
BTCPay Server warns of wallet drains, urges server shutdowns
BeInCrypto
Tier 2
Is Your BTCPay Server Safe? What the Hot Wallet Drain Investigation Shows
The Defiant
Tier 1
BTCPay Links Hot-Wallet Drains to Versions 2.4.1 and Older
Coverage timeline
- First reported by CoinDesk
- Also reported by Crypto.news
- CryptoVideos brief published
- 1 more publisher added to sources
How this page is checked. AI drafted this brief from selected independent reports. Automated checks compare numbers, source coverage and topic terms, but may miss errors. Publication and evidence refreshes run automatically. Read the linked reports for context. Report an error
NEXO
−0.6%
