Crypto payment server hacked—why were only older versions affected?
Tracked funds: 18.38 BTC + 3,405 LTC (~$1.63 million) | 682 sweeps, Oct. 30–Nov. 2, 2026
BTCPay Server, an open-source crypto payment processor used by many merchants, confirmed that hot wallets on servers running version 2.4.1 or earlier were drained. Key points:
1. Old vulnerability, server not updated — A patch has been available since version 2.4.2 (August 7, 2026). The drained servers had never installed it. The attacker logged in as an admin and drained the hot wallets.
2. Activity continued after the warning — According to Bitquery, 87% of the funds moved in a single wave on November 1, and another 267 sweeps (~$150,000) took place after BTCPay asked servers to be shut down. This is a lower-bound estimate and does not include Lightning funds.
3. Updating alone isn’t enough — Users of older versions are advised to migrate to a new server with a new wallet and seed. Wallets whose keys are kept outside the server (e.g., hardware wallets) are safe.
The lesson: keep only operational funds in hot wallets; store the rest in a wallet whose keys you control.
#KeamananKripto #Bitcoin #BTCPay #HotWallet #BinanceSquare
Tracked funds: 18.38 BTC + 3,405 LTC (~$1.63 million) | 682 sweeps, Oct. 30–Nov. 2, 2026
BTCPay Server, an open-source crypto payment processor used by many merchants, confirmed that hot wallets on servers running version 2.4.1 or earlier were drained. Key points:
1. Old vulnerability, server not updated — A patch has been available since version 2.4.2 (August 7, 2026). The drained servers had never installed it. The attacker logged in as an admin and drained the hot wallets.
2. Activity continued after the warning — According to Bitquery, 87% of the funds moved in a single wave on November 1, and another 267 sweeps (~$150,000) took place after BTCPay asked servers to be shut down. This is a lower-bound estimate and does not include Lightning funds.
3. Updating alone isn’t enough — Users of older versions are advised to migrate to a new server with a new wallet and seed. Wallets whose keys are kept outside the server (e.g., hardware wallets) are safe.
The lesson: keep only operational funds in hot wallets; store the rest in a wallet whose keys you control.
#KeamananKripto #Bitcoin #BTCPay #HotWallet #BinanceSquare
