BTCPay Server Hack Drains Bitcoin Hot Wallets on Outdated Versions
Photo: DeFi Planet
On November 1, 2026, open-source Bitcoin payment processor BTCPay Server issued an emergency shutdown warning after discovering that attackers were actively stealing funds from merchant hot wallets. The project instructed operators running self-hosted servers to manually execute a shutdown script and take their instances offline while its security team investigates the attack. According to founder Nicolas Dorier, initial findings show that hackers gained top-level administrator access to systems running version 2.4.1 or older. 🚨 We are receiving reports of hot wallets on BTCPay Servers being swept by unauthorized attackers.
Source: DeFi Planet
