I've been tracking a second security scare this week, and it lands on merchants who run their own Bitcoin payments.

BTCPay Server told operators to shut down their instances while it investigates reports that hot wallets on some self-hosted servers were swept by attackers. Its follow-up narrowed the suspected attack vector to version 2.4.1 or older, with no credible reports of drains on the latest 2.4.7 release. Founder Nicolas Dorier said attackers logged in with administrator privileges on hit servers, though how they got that access is unknown.

No loss total, no count of affected servers and no fix timeline has been disclosed, so I won't dress this up as bigger — or smaller — than the evidence allows. What makes it matter is the design: each merchant hosts their own server, so there is no master switch — every operator acts alone.

If you run BTCPay, or pay through a merchant who does, what would it take for you to trust a hot wallet again after a week like this? DYOR — a developing security story, not a signal.

$BTC #Bitcoin #CryptoNews #BTCPay #WalletSecurity #SecurityAlert