BTCPay Server vulnerability: about $1.63M traced to theft-linked addresses
Photo: The Cryptonomist
A vulnerability in BTCPay Server was leveraged by attackers to empty hot wallets on installations that had not been updated, and Bitquery linked roughly $1.63 million in Bitcoin and Litecoin to wallet addresses tied to these incidents. According to BTCPay Server’s incident update from November 2, the breaches affected versions 2.4.1 and earlier, despite a patch having existed since August 7. Key takeaways The attacks targeted BTCPay Server versions 2.4.1 and older. Bitquery tracked 682 wallet sweeps between October 30 and November 2. Affected operators were told to rebuild with fresh wallets and seeds.
Source: The Cryptonomist
