Topic Archive

#BTCPay Server

7 Stories Found

Coins•Nov 2, 2026

Bitcoin Ecosystem on Security Alert as Another Platform Targeted by Hackers Following Binance Incident

Key Highlights: BTCPay Server operators are urged to shut down and disconnect servers from the internet following targeted attacks on vulnerable hot wallets. The security incident impacts legacy systems running version 2.4.1 and older, while the latest version, 2.4.7, shows no credible reports of compromised wallets. BTCPay Server co-founder Nicolas Dorier confirmed attackers secured administrator ...

4 min readRead

Coins•Nov 2, 2026

BTCPay Urges Users to Shut Down Servers Following Reports of Drained Bitcoin Wallets

Key Highlights BTCPay Server urged merchants and users on Sunday to immediately shut down their servers following reports of security exploits. Attackers have targeted and begun draining funds from internet-connected “hot wallets” deployed on user-hosted instances. The vulnerability directly exposes automated transaction environments where merchant recovery seeds are kept on active servers to facilitate payouts. ...

3 min readRead

Coins•Nov 1, 2026

BTCPay Server Urges Users to Shut Down Following Reports of Hot Wallet Drains

Key Highlights: BTCPay Server developers have issued an urgent shutdown directive across all versions of the open-source software following reports of compromised wallets. The alert follows an emergency version 2.4.7 release on October 29 that addressed critical and moderate vulnerabilities, though its link to the latest incident remains unconfirmed. Unlike an August Lightning Network credential ...

4 min readRead

Coins•Nov 1, 2026

Bitcoin Payment Processor BTCPay Hit by Reports of Hot Wallet Theft

Key Highlights: BTCPay Server deployments running versions prior to 2.4.2 have been targeted by attackers gaining unauthorized administrator access. Founder Nicolas Dorier noted that public and demo instances on version 2.4.7 show no signs of compromise, though total losses and the exact entry point remain undisclosed. The security incident follows the rollout of version 2.4.7, ...

4 min readRead

Coins•Nov 1, 2026

BTCPay Server Urges Users to Shut Down Following Reports of Hot-Wallet Sweeps

Key Highlights: BTCPay Server operators are responsible for their own security actions due to the platform’s self-hosted architecture and server-based hot-wallet signing keys. A fresh alert follows an earlier August exploit where attackers stole funds from LND node operators using compromised credentials obtained via a flaw fixed in version 2.4.2. While BTCPay previously stated its ...

4 min readRead

Coins•Oct 10, 2026

BTCPay Docker Users Must Opt Into Tor on Next Update to Maintain Onion Access

Key Highlights: BTCPay Server administrators must manually add the Tor fragment after updating to version 2.4.5 to maintain onion routing services. Version 2.4.5 introduces a security-focused breaking change that blocks outbound HTTP traffic to private networks by default to mitigate SSRF vulnerabilities. Operators relying on private-network endpoints for Lightning, LNURL, webhooks, or invoice notifications must ...

4 min readRead

Coins•Sep 13, 2026

Malicious Bots Probe Exposed Bitcoin Payment Servers to Steal Master Admin Keys

BTCPay Server Warns of Bot Probing Exposed Lightning Nodes Bitcoin payment processor BTCPay Server has warned that automated bots are actively probing exposed Lightning Network nodes for a potential path to administrative control. The activity follows a separate critical vulnerability exploited in August that allowed attackers to obtain credentials protecting LND nodes and drain merchant ...

3 min readRead