BTCPay Server Warns of Active Flaw Putting Hot Wallet Funds at Risk

BTCPay Server warned operators that attackers are actively exploiting a critical flaw in its payment software, putting funds held in hot wallets on affected instances at risk. The project urged operators to install version 2.4.2 immediately. Instances that cannot be upgraded should be shut down. Operators can check the version displayed in the server footer to confirm the installed release. BTCPay Server is an open-source, self-hosted cryptocurrency payment processor. Merchants use it to accept Bitcoin and other cryptocurrencies and manage their own payment infrastructure. The alert applies to operators running their own BTCPay Server instances.