BTCPay Tells Operators to Shut Their Servers Down — Hot Wallets Are Being Swept and Nobody Knows How Yet

BTCPay Server — the self-hosted bitcoin payment tool — told operators on Sunday to shut their servers down and stay offline while it investigates reports of hot wallets being swept. Founder Nicolas Dorier said reports appear to involve releases older than 2.4.2; the attacker logged in as an administrator, by means not yet known. No patch, loss total or instance count has been announced; the project’s own servers, on 2.4.7, were not attacked.