BTCPay warns that crypto payment servers have been attacked, urges users to shut down servers

AI-assisted source summary · not independently verified. Content standards

After discovering that hot wallets on some BTCPay Server instances had been emptied by unauthorized attackers, BTCPay urged users to shut down their instances to assist with the investigation. Its open-source software allows merchants to self-host servers and receive bitcoin directly into internet-connected wallets; when a server is compromised, assets may be transferred out automatically, and there is no unified “master switch” to shut them all down. BTCPay recommends that users running instances execute `./btcpay-down.sh`.