🚨 Security Alert | Vulnerability in older versions led to hot wallet funds being stolen; BTCPay Server urges users to migrate immediately
Odaily Planet Daily reports: On November 1, the open-source Bitcoin payment processor BTCPay Server received multiple reports that Bitcoin and LTC funds had been stolen without authorization from hot wallets on its platform. On November 2, the project team published an investigation update confirming that the attacks targeted servers running BTCPay Server version 2.4.1 or earlier. Attackers exploited a vulnerability patched in version 2.4.2 on August 7, using various methods to gain server administrator privileges and drain hot wallet funds. BTCPay Server founder Nicolas Dorier confirmed that only servers running versions earlier than 2.4.2—particularly version 2.4.1—were affected; no credible reports of losses have emerged from users running the latest version, 2.4.7. Some affected service providers, including LunaNode, have automatically shut down vulnerable older instances.
Check for yourself: If you have authorized the relevant contracts, check your authorizations and revoke them as soon as possible.
$BTC $LTC #安全事件
Odaily Planet Daily reports: On November 1, the open-source Bitcoin payment processor BTCPay Server received multiple reports that Bitcoin and LTC funds had been stolen without authorization from hot wallets on its platform. On November 2, the project team published an investigation update confirming that the attacks targeted servers running BTCPay Server version 2.4.1 or earlier. Attackers exploited a vulnerability patched in version 2.4.2 on August 7, using various methods to gain server administrator privileges and drain hot wallet funds. BTCPay Server founder Nicolas Dorier confirmed that only servers running versions earlier than 2.4.2—particularly version 2.4.1—were affected; no credible reports of losses have emerged from users running the latest version, 2.4.7. Some affected service providers, including LunaNode, have automatically shut down vulnerable older instances.
Check for yourself: If you have authorized the relevant contracts, check your authorizations and revoke them as soon as possible.
$BTC $LTC #安全事件
