Hacking News
BTCPay Server Attack Raises Concerns for Bitcoin Merchants
TCPay Server’s investigation team identified an attack vector that grants unauthorized admin access and hot wallet drains on BTCPay Server versions 2.4.1, released on July 23, 2026, and older versions. There are no credible reports of hot wallet thefts linked to BTCPay Server users using the latest 2.4.7 release. However, the incident highlights the importance of upgrading to the latest version to protect funds.