BTCPay Server has issued an urgent security advisory for users to update their software following reports of attackers draining hot wallets on older versions of the payment processing platform, based on information published by Bleeping Computer.
The open-source cryptocurrency payment processor, which allows businesses to accept digital assets without intermediaries, identified an attack vector targeting instances running version 2.4.1 or earlier. While the project released version 2.4.7 as an emergency update to address a critical vulnerability, investigators discovered that threat actors were specifically exploiting flaws in versions older than 2.4.2 to gain administrative access. The founder, Nicolas Dorier, confirmed that the attacks did not target public servers but focused on self-hosted instances. This incident follows a previous security advisory from August regarding an actively exploited flaw that exposed Lightning Network Daemon credential files. The project has not yet disclosed the specific nature of the latest vulnerability. Administrators are strongly advised to update to version 2.4.7 immediately to prevent further unauthorized access and potential fund theft. Users operating older versions should take their instances offline until the update is applied. Impacted parties are encouraged to submit activity logs to the security team for further analysis.
Source: Bleeping Computer
