BTCPay Server Urges Immediate Shutdown Following Reports of Hot Wallet Draining Attacks

BTCPay Server has urged operators to immediately shut down their self-hosted instances following reports of attackers draining connected hot wallets. Core developers and founder Nicolas Dorier noted that the compromises appear limited to software versions predating 2.4.2, where attackers obtained administrator access, while public demo servers on version 2.4.7 remained unaffected. The breach impacts application-level software rather than the core Bitcoin network, though total financial losses and compromised server counts remain undisclosed. Several merchants, including Coincards, have taken servers offline, temporarily disrupting Bitcoin payment processing.