BTCPay, a Bitcoin Payment Tool, Tells Users to Switch Off Their Servers After Reports of Drained Wallets

Administrators and merchants operating self-hosted Bitcoin payment infrastructures were placed on high alert this morning. BTCPay Server, the premier open-source non-custodial cryptocurrency payment processor, issued an urgent advisory warning users to shut down their active server instances after multiple operators reported unauthorized wallet drainings.

The open-source project says it is still investigating and hasn't given a loss figure or announced a fix. Its founder said the reports appear to involve versions older than 2.4.2. Developers are urging node operators to isolate their nodes, take their instances offline immediately, and review deployment configurations to prevent further capital bleed.

The development has sent ripples through the merchant community that relies heavily on BTCPay Server for autonomous, intermediary-free e-commerce transactions. While developers work to identify whether the vector involves a zero-day exploit, dependency compromise, or misconfigured API keys, users have been advised to keep hot wallet balances at zero and operate solely in read-only states until a patch is finalized.

This article does not constitute investment advice. The content provided here is solely for informational purposes and reflects the results generated by TradeitKN's AI analysis system. Before making any financial decisions, you should conduct your own research or consult with a licensed financial advisor.