BTCPay Server founder says attackers logged into outdated servers as administrators and transferred out hot wallet funds

AI-assisted source summary · not independently verified. Content standards

The BTCPay Server founder said that the recent incident involving hot wallet funds being transferred out affected servers running version 2.4.1 or earlier, with attackers logging in as administrators; the team is still investigating how the intrusion occurred. BTCPay recommends that operators shut down their instances before the investigation concludes; the official public server running 2.4.7 was not attacked. The team said operators who have updated at least once since the release of 2.4.2 do not need to panic, and reminded users not to store excessive funds in hot wallets.