In brief

BTCPay Server team links hot wallet leak to an outdated connection

Attacker logged into admin account… signs point to a vulnerability in versions before 2.4.2

Current version is 2.4.7; no significant reports of leaks

Read Phil Haunhorst’s original article on kr.beincrypto.com: Is BTCPay Server safe? Findings from the hot wallet leak investigation