BTCPay Server urged operators to shut down running instances immediately after receiving reports that attackers were transferring hot-wallet funds, according to Bitcoin News. Operators were instructed to use ./btcpay-down.sh. The BTCPay Server team is investigating, and the attack's cause and extent remain unknown.