WiretechnologyDextape brief
BTCPay Server Reveals How Attackers Targeted Older Instances in Hot Wallet Incident
Founder Nicolas Dorier says public servers running version 2.4.7 were not attacked. Meanwhile, older vulnerabilities are under investigation.
Dextape brief
BTCPay Server, an open-source Bitcoin and Lightning payment processor, has traced an attack that targeted installations running version 2.4.1 or earlier, following reports that unidentified intruders had emptied hot wallets. The project's founder, Nicolas Dorier, said his public servers were not compromised on the 2.4.7 release and that the reports appear to concern builds older than 2.4.2. He added that the attacker obtained administrator access to those instances, and that traces indicate vulnerabilities present before 2.4.2 were exploited, though the method remains under review. The team is advising all users to update and has invited affected operators to send details and logs to its security inbox. The company has not said how much was taken or how many servers were hit. The episode follows a flaw disclosed about three months earlier.
Why it matters: The incident shows that older self-hosted payment software can expose operator funds, which makes timely updates a central concern for crypto merchants and node operators.
Read the full story
Dextape context
Built from Dextape’s own wire, stories and glossary.
Terms in this story
- Hot wallet
- A wallet whose keys sit on an internet-connected device, such as a phone app or browser extension.
Mentioned in this story
Open a coin page for its current price.