BTCPay warns old software left hot wallets at risk
BTCPay Server urged operators to shut down and update servers after reports of hot-wallet withdrawals from installations running version 2.4.1 or earlier.
BTCPay Server identified an attack vector affecting older versions of its Bitcoin payment software after receiving reports that attackers had drained funds from users’ hot wallets.
In a Monday update, the project reported no credible cases of hot-wallet drains among users running version 2.4.7, its latest release. Version 2.4.1 was released on July 23, 2026.
The warning followed an earlier instruction for operators to shut down their server instances while BTCPay investigated reports of unauthorized wallet withdrawals. The project also published shutdown instructions and urged users to install the latest version.
BTCPay has not disclosed how many operators were affected, how much money was stolen or how attackers accessed the wallets. It asked affected users to submit relevant information and server logs to its security team.
The reports emerged less than three months after BTCPay restricted remote access to Lightning services following an August attack. That incident involved the theft of Lightning Network Daemon credentials and funds. BTCPay has not said whether the latest attack vector is connected to that vulnerability.
The material on GNcrypto is intended solely for informational use and must not be regarded as financial advice. We make every effort to keep the content accurate and current, but we cannot warrant its precision, completeness, or reliability. GNcrypto does not take responsibility for any mistakes, omissions, or financial losses resulting from reliance on this information. Any actions you take based on this content are done at your own risk. Always conduct independent research and seek guidance from a qualified specialist. For further details, please review our Terms, Privacy Policy and Disclaimers.
Articles by this author
