BTCPay Server Warns of Thefts Linked to Outdated Software
Bitcoin payment platform identifies an attack vector in versions prior to 2.4.1 and urges immediate server updates.
The BTCPay Server project has requested that operators temporarily disable their servers following reports of unauthorized withdrawals from hot wallets. An investigation identified an attack vector affecting instances running version 2.4.1 or earlier of the payment software.
The project team stated that they have received no reports of issues among users running the latest version, 2.4.7. BTCPay Server has not yet disclosed the total amount of funds stolen or the exact number of operators impacted by the security flaw.
This incident follows a previous restriction on remote access to the Lightning Network, which was implemented in August after a credential exploit. The company has asked affected users to submit logs and detailed information to assist in the technical analysis of the incident.
In a separate security development, hardware wallet manufacturer Trezor has increased the character limit for passphrase protection. The measure aims to bolster security against attacks that exploit vulnerabilities in digital asset storage devices.
Spotted an error? Write to suporte@criptoico.com.br.
