BTCPay Server Warns of Bitcoin Wallet Drains in Older Versions
BTCPay Server has urged operators to shut down affected payment servers after attackers reportedly gained administrator access to older installations and drained connected Bitcoin hot wallets. The suspected attack vector affects versions 2.4.1 and earlier; investigators have not determined how attackers obtained access. The project says it has received no credible reports of wallet theft involving version 2.4.7, released on October 29. It advises users to update, keep affected servers offline during the investigation, review logs and move funds from internet-connected wallets to cold storage where appropriate. Hosting providers including LunaNode have shut down some instances as a precaution, and BTCPay Server is asking affected users to submit incident details and server logs. The number of compromised servers and total losses remain undisclosed. The incident follows an August vulnerability involving BTCPay Server’s Lightning Network integration. It highlights risks for merchants using self-hosted Bitcoin payment infrastructure, but its direct effect on the wider crypto market is likely limited.
Neutral
The incident concerns security at specific BTCPay Server installations, not a change to Bitcoin’s protocol, supply or network operation. It could prompt short-term caution among traders and merchants, particularly if further thefts or larger-than-reported losses emerge, but the available reports provide no scale of losses and no evidence of a broader Bitcoin disruption. Historically, infrastructure breaches can briefly weigh on sentiment through concerns about custody and payment security; price effects tend to be limited when the incident is contained and does not affect core network functions. Longer term, the event may encourage merchants to upgrade, strengthen server controls and use cold storage, but those steps do not by themselves imply a lasting change in Bitcoin’s market fundamentals. The expected impact on BTC price is therefore neutral, with further technical disclosures and loss estimates the main factors that could alter trader sentiment.