BTCPay Server hack targets versions up to 2.4.1, total losses unknown

Self-hosted payment processor BTCPay Server has confirmed that attackers accessed hot wallets on servers running outdated software, affecting versions 2.4.1 and earlier. The project team stated that total losses have yet to be determined and investigators have still not explained how attackers obtained administrator-level access during the incident. BTCPay Server, an open-source platform enabling merchants to process Bitcoin transactions independently, warned operators of a security breach after unauthorized parties reportedly drained funds from hot wallets. The project initially advised all operators to temporarily shut down their servers while the team investigated the attack and established which versions were vulnerable.

Source: CoinTurk News