Hackers Exploit BTCPay Server Flaw to Steal Bitcoin and Litecoin From Hot Wallets
The Hacker News
BTCPay Server, a self-hosted, open-source cryptocurrency payment processor, has urged users to install the latest version of its software in response to reports of Bitcoin and Litecoin being stolen from hot wallets on instances running older versions. "Our investigation found that these attacks targeted servers running BTCPay Server 2.4.1 (released on 23 July 2026) or earlier," BTCPay Server said. "The attackers used a different method to exploit the vulnerability fixed in 2.4.2, released on 7 August 2026." Users who are running versions 2.4.1 or earlier are recommended to move to a fresh server with a new wallet, even in scenarios where users have not noticed a theft.
Reported by The Hacker News. You are reading an excerpt. The full story is on their site.
Read it at The Hacker News- Filed under
- Hacks & Scams
- First seen
- Reported by
- The Hacker News
- Also carried by
- RS Web Solutions
Before you act on it
A listing, a launch or an airdrop is not a reason to buy. Check the contract address on the project's own site. Never sign a transaction or hand over a seed phrase to claim anything.
