If you run a BTCPay Server instance, shut down the server now. On November 2, the official account posted on X that it had received multiple reports of hot-wallet funds being transferred by unauthorized attackers. It recommended shutting down with ./btcpay-down.sh and waiting until the investigation is complete. Just three days earlier, on October 29, the project had released the emergency 2.4.7 update, which fixed a critical vulnerability.

If you run your own payment node, don’t keep funds in the hot wallet long-term.

#加密安全 #BTCPayServer