Tech · 1 d ago
BTCPay Server urges users to shut down after Bitcoin wallet thefts
The open-source Bitcoin payment software said it was receiving reports of attackers sweeping funds from hot wallets connected to its servers. It asked operators to shut down their servers while it investigates.
What we know
- Attackers gained administrator access
- Affected servers ran versions before 2.4.2
- No credible drain reports on version 2.4.7
Not yet
- How attackers got in
- How much bitcoin was stolen
- How many merchants were hit
Affected servers ran versions older than 2.4.2 and attackers gained administrator access, but the project has not said how they got in or how much was stolen.
The term
hot wallet
A hot wallet stays connected to online systems, so its funds can be moved by anyone who gains enough access to those systems.
What operators can do
BTCPay Server advises operators to update their software, keep only small amounts in hot wallets and move the rest to cold storage, where keys stay offline.
