In brief

  • BTCPay Server team links hot wallet draining to older versions

  • Attackers logged in as admin — evidence points to vulnerabilities in versions before 2.4.2

  • No credible withdrawals reported in the current version, 2.4.7

Read the original story, Is Your BTCPay Server Safe? What the Hot Wallet Drain Investigation Shows, by Phil Haunhorst on se.beincrypto.com