BTCPay urges urgent update after hot wallet attack hits older software versions

BTCPay Server has identified a new attack vector impacting earlier versions of its payment software, leading to reports of unauthorized withdrawals from users’ hot wallets. The open-source Bitcoin payment processor stated that attackers focused on BTCPay Server installations running version 2.4.1 or earlier. This version had been in use since its release on July 23, 2026. BTCPay advised its users to upgrade immediately, emphasizing that its latest version, 2.4.7, appeared unaffected by these recent incidents. No confirmed cases of hot wallet losses have been linked to users who had already updated to version 2.4.7.