Crypto stolen from hot wallets on outdated BTCPay Server
Funds were withdrawn without authorization from Bitcoin and Litecoin hot wallets of merchants and others running outdated versions of BTCPay Server. The development team identified an attack path targeting versions 2.4.1 and earlier and signs of the attacker logging in with administrator privileges, and asked operators to shut down their servers. The number of affected operators, the amount stolen and how administrator access was gained are under investigation.
Key facts
- Affected organization
- Being confirmed
- Incident type
- Hacking & intrusion
- Occurred / detected
- Not confirmed
- Scale of damage
- Theft of funds from Bitcoin and Litecoin hot wallets, scale unconfirmed
- Cause / method
- Attack targeting BTCPay Server 2.4.1 and earlier and administrator-level access
- Location
- Other countries
If your data was exposed
Exposed dataCrypto assets
- Check login and withdrawal history in your exchange app, and turn on withdrawal address whitelisting and withdrawal delays.
Timeline
- Unauthorized withdrawals from hot wallets on outdated servers were reported, and the development team asked operators to shut down their servers.
- The theft of Bitcoin and Litecoin was reported, along with the fact that the scale of damage and how administrator access was gained are still under investigation.
4 related reports
- Hackers Drain Bitcoin Hot Wallets on BTCPay Servers, Users Urged to Shut Down Immediately
- BTCPay Server warns of hot wallet thefts running on outdated software
- BTCPay Tells Merchants to Switch Off Servers Amid Hot Wallet Attack Reports
- BTCPay Server warns of hot wallet crypto thefts on outdated instances
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.