← Back to overview

BTCPay Server maintainers have issued an urgent warning to users about active cryptocurrency theft targeting hot wallets on outdated instances of the open-source payment processor. Hackers have been draining funds from installations running older versions of BTCPay Server. Users are strongly urged to update to the latest version immediately to mitigate the risk. The attacks appear to be opportunistic, targeting unpatched or outdated deployments. This highlights the risk of running self-hosted cryptocurrency infrastructure without keeping software up to date. Hot wallets, which are connected to the internet, are particularly vulnerable to such exploits. The incident underscores the importance of timely patching in financial and cryptocurrency-related software.

Affected products

  • BTCPay Server

Categories

  • Critical Infrastructure
  • Web Technologies