Hacking News
BTCPay Servers Vulnerable to Attack
BTCPay Server, a free, open-source tool for businesses to accept Bitcoin payments, instructed operators to shut down their servers on Sunday after reports of unauthorized attackers targeting hot wallets connected to them. The attackers were targeting versions 2.4.1 and older, and BTCPay founder Nicolas Dorier identified an attack vector for instances running version 2.4.1, released on July 23. No credible reports of hot wallet drains for users running the latest 2.4.7 release were identified, and merchants were urged to keep their software updated and provide details and logs to the security team if affected.