Hacking News
BTCPay Server Security Advisory: Hackers Steal $1.63 Million in Bitcoin and Litecoin
The open-source Bitcoin payment software provider BTCPay Server has warned merchants to rebuild outdated payment servers and replace wallets after attackers stole approximately $1.63 million in Bitcoin and Litecoin. The warning follows a series of attacks targeting installations running version 2.4.1 or earlier, using a different method to exploit a vulnerability patched on August 7. Blockchain analytics firm Bitquery traced 18.38 BTC and 3,405 LTC across 682 wallet sweeps between October 30 and November 2, with the busiest hour accounting for approximately $725,000 in transfers. BTCPay regrets not reaching operators still running outdated installations after its August security advisory and has issued additional security updates since then.