BTCPay Server Urges Shutdown After Wallet Attacks
Bitcoin payment software reports breaches in older versions and requests immediate operational halts to prevent losses.
The BTCPay Server project has requested that merchants shut down their Bitcoin payment servers. This measure follows reports of attackers draining wallets connected to these instances. The software is an open-source tool that allows for decentralized digital payment processing.
Investigations indicate that the attacks target software versions prior to 2.4.2. Project founder Nicolas Dorier stated that attackers gained administrative access to the affected servers. The identified attack vector focuses specifically on instances running version 2.4.1 or older.
The BTCPay security team reported that there are no records of compromised wallets in version 2.4.7. This latest update was released last Thursday to fix critical flaws reported previously. Hosting providers have already begun automatically shutting down outdated instances to protect users.
Using hot wallets on BTCPay requires caution because private keys are stored on servers connected to the internet. The software documentation itself classifies this functionality as dangerous due to inherent security risks. The project has not yet disclosed the total volume of Bitcoin stolen during the wave of attacks.
Spotted an error? Write to suporte@criptoico.com.br.
