BTCPay Server warns of hot wallet thefts running on outdated software

What happened

BTCPay Server said its investigation identified an attack vector targeting payment software version 2.4.1 or earlier after users reported hot-wallet funds being drained. It reported no credible drain reports from users on version 2.4.7 and urged operators to update; the number of affected operators and stolen value remain undisclosed.

Confirmed

Global impact / market context

Operators using older versions face a risk of unauthorized withdrawals, which can directly reduce users’ funds and weaken confidence in BTCPay-based payments. If that prompts operators to suspend or replace payment services, transaction processing and related revenue could be disrupted, though the article gives no measure of the business impact.

Analyst inference

The reports follow an earlier shutdown warning and a separate August incident involving remote Lightning access and stolen credentials. BTCPay says it is unclear whether the events are connected, so the article establishes neither a wider Bitcoin payment-system impact nor the scale of financial losses.

Confirmed

What to watch

1. Whether BTCPay publishes technical details on the attack vector, affected installations, or stolen funds; these details would clarify the scope and severity of the risk to operators. Analyst inference
2. Whether BTCPay’s request for affected users to send information and logs leads to further findings, including any confirmed connection to the August Lightning incident. Confirmed
3. Whether operators update older installations to version 2.4.7, identified by BTCPay as the latest release, and whether further reports of hot-wallet drains appear. Analyst inference

Affected assets

• BTC — Bitcoin

Evidence

• cointelegraph.com