🚨 BTCPAY SERVER: BITCOIN THEFTS REPORTED AT OLDER INSTALLATIONS
BTCPay Server, a tool that allows merchants to accept payments in $BTC without intermediaries, warned of unauthorized withdrawals from wallets connected to its servers.
The project asked users to temporarily shut down their installations while it investigates.
🔎 WHAT DID THE INVESTIGATION REVEAL?
• Reports point to servers running version 2.4.1 or earlier.
• The attackers managed to gain administrator access to the affected installations.
• The team said it had received no credible reports of thefts involving version 2.4.7, the latest release. This does not guarantee that it is invulnerable.
• No official figures on losses or complete technical explanation have been published yet.
⚠️ IF YOU ADMINISTER BTCPAY SERVER
Review the official announcements before bringing the service back online.
If you are using an older version, keep the server shut down and follow the project’s instructions to update it safely.
Check your wallet transactions and look for any unfamiliar administrative access.
A hot wallet stores the keys needed to move funds on a device connected to the internet. If that device is compromised, the assets may be exposed.
📌 IMPORTANT
There is no evidence that the Bitcoin network has been compromised. The issue affects certain software installations, not all $BTC users.
Sources: BTCPay Server and Nicolas Dorier, 1–2/11/2026.
BTCPay Server, a tool that allows merchants to accept payments in $BTC without intermediaries, warned of unauthorized withdrawals from wallets connected to its servers.
The project asked users to temporarily shut down their installations while it investigates.
🔎 WHAT DID THE INVESTIGATION REVEAL?
• Reports point to servers running version 2.4.1 or earlier.
• The attackers managed to gain administrator access to the affected installations.
• The team said it had received no credible reports of thefts involving version 2.4.7, the latest release. This does not guarantee that it is invulnerable.
• No official figures on losses or complete technical explanation have been published yet.
⚠️ IF YOU ADMINISTER BTCPAY SERVER
Review the official announcements before bringing the service back online.
If you are using an older version, keep the server shut down and follow the project’s instructions to update it safely.
Check your wallet transactions and look for any unfamiliar administrative access.
A hot wallet stores the keys needed to move funds on a device connected to the internet. If that device is compromised, the assets may be exposed.
📌 IMPORTANT
There is no evidence that the Bitcoin network has been compromised. The issue affects certain software installations, not all $BTC users.
Sources: BTCPay Server and Nicolas Dorier, 1–2/11/2026.