BTCPay Tells Merchants to Switch Off Servers Amid Hot Wallet Attack Reports

BTCPay Server, a widely used open-source Bitcoin payment processing software, has issued a critical security advisory urging merchants to shut down their servers temporarily. The alert stems from confirmed reports of active hot wallet attacks specifically targeting versions 2.4.1 and older of the software. This urgent warning comes just days after BTCPay Server had released an emergency patch designed to fix a separate critical vulnerability. The attacks suggest that malicious actors are actively exploiting known weaknesses in these outdated versions to compromise hot wallets, which typically store smaller amounts of Bitcoin for day-to-day operational use. Merchants utilizing BTCPay Server are strongly advised to update their installations to the very latest version without delay to safeguard their funds and mitigate the risk of exploitation. This incident highlights the critical importance of maintaining current software versions and adhering to robust security protocols within the Bitcoin ecosystem, especially for platforms handling financial transactions.