🚨 ALERTE URGENTE DE SÉCURITÉ CRYPTO — BTCPay Server (Environ 1,62 million de dollars dérobés dans des portefeuilles chauds

TOJJER · 2026-11-07T18:15:09.000Z

BTCPay Server, le processeur de paiements Bitcoin open source et auto-hébergé, a confirmé que des pirates ont dérobé des cryptomonnaies dans des portefeuilles chauds utilisant des versions obsolètes de son logiciel. La société d’analyse blockchain Bitquery a retracé environ 1,62 million de dollars de fonds volés — 18,38 BTC et 3 405 LTC — répartis sur 682 transferts distincts, dont la plupart ont eu lieu le 1er novembre 2026. Selon le rapport officiel de BTCPay Server sur l’incident, les attaques ont ciblé des serveurs utilisant la version 2.4.1 ou une version antérieure. Les pirates ont exploité une vulnérabilité déjà corrigée dans la version 2.4.2, publiée le 7 août 2026, en recourant à une méthode différente de celle décrite dans l’avis d’août. Les premiers signalements des vols sont apparus aux alentours du 1er novembre, et BTCPay Server a averti les opérateurs sur X le même jour de mettre leurs serveurs hors ligne pendant son enquête.

BTCPay Server, the open-source, self-hosted Bitcoin payment processor, has confirmed that attackers stole cryptocurrency from hot wallets running outdated versions of its software. Blockchain analytics firm Bitquery traced about $1.62 million in stolen funds — 18.38 BTC and 3,405 LTC — across 682 separate sweeps, most of them on November 1, 2026.
According to BTCPay Server's official incident report, the attacks targeted servers running version 2.4.1 or earlier. The attackers exploited a vulnerability that had already been fixed in version 2.4.2, released on August 7, 2026, using a different method than the one documented in the August advisory. Reports of the thefts began surfacing around November 1, and BTCPay Server warned operators on X the same day to shut down their servers while it investigated.
Bitquery found that 87% of the stolen funds moved in a single wave on November 1, between 14:12 and 22:16 UTC. About 77% came from 32 sweeps of $10,000 or more, while roughly half of all sweeps were under $100. The earliest sweep Bitquery could trace came early on October 30, less than a day after BTCPay Server shipped version 2.4.7. Litecoin sweeps began on November 1, with the Bitcoin wave starting within the hour.
BTCPay Server said it has seen no credible reports of hot wallet drains from users running the latest 2.4.7 release. It urged anyone still on version 2.4.1 or earlier to move to a fresh server with a new wallet — even if no theft was noticed — because updating alone cannot remove access an attacker may already have gained. Funds in wallets whose spending keys are held off the server, including hardware wallets, were unaffected.
The project published two destination addresses linked to the incident and advised affected users to report thefts to its security team and to local authorities. It also recommended keeping only the funds needed for daily operations in a hot wallet and moving the rest to a wallet whose keys are held offline.
This is not financial advice. Do your own research before making any investment decision.
$BTC $BNB $ETH 
#alert #HotTrends #SecurityAlert #news #BTC走势分析 