BTCPay Server Reveals How Attackers Targeted Older Instances in Hot Wallet Incident
BTCPay Server’s investigation has recognized an assault vector focusing on situations working model 2.4.1, launched on July 23, 2026, or older, following reviews of unauthorized attackers sweeping scorching wallets.
The open-source cryptocurrency cost processor mentioned it has no credible reviews of scorching pockets drains affecting customers working the newest 2.4.7 launch.
Unauthorized Hot Wallet Sweeps
The staff is urging everybody to maintain their BTCPay Server situations up to date and has asked impacted customers to ship all particulars and logs to safety@btcpayserver.org. Earlier, the platform had urged customers to close down their situations till the investigation was full. Its founder, Nicolas Dorier, confirmed,
“Update on my half: Our public servers weren’t attacked (on 2.4.7), it appears reviews are earlier than 2.4.2. The attacker managed to log in as admin on these occasion, we’re nonetheless making an attempt to determine how… We have traces that pre 2.4.2 vulnerabilities have been used. We will talk extra in a following weblog put up.”
It has not disclosed how a lot was misplaced or what number of servers have been affected.
BTCPay Server is a free, self-hosted, open-source Bitcoin cost processor that enables people and retailers to just accept Bitcoin and Lightning Network funds with out counting on third-party intermediaries. Payments go on to linked wallets, with no subscription or transaction charges past customary community costs. The platform additionally contains instruments for managing invoices, point-of-sale funds, crowdfunding campaigns, and ideas.
Previous Security Scares
The newest growth comes round three months after BTCPay Server disclosed a vulnerability that was exploited to steal funds from some customers. The flaw allowed attackers to acquire LND admin macaroon credentials from affected situations and use them to entry linked LND wallets.
The incident additionally comes simply days after the Binance hack, in which an exploiter drained greater than $6 billion in crypto belongings. The heist, described as the most important exploit in crypto historical past, has been attributed by the FBI and safety analysts to TraderTraitor, a state-sponsored cyber warfare group linked to North Korea.
The put up BTCPay Server Reveals How Attackers Targeted Older Instances in Hot Wallet Incident appeared first on CryptoPotato.
