BTCPay Server alerts operators after hot wallet thefts on old software

BTCPay Server, a popular open‑source Bitcoin payment processor, has issued a warning after reports of attackers draining funds from hot wallets on older software versions.

Operators running legacy BTCPay Server installations were advised to shut down their servers immediately, as the vulnerability allows unauthorized access to hot wallets and the theft of stored Bitcoin.

Outdated Software Vulnerabilities

The incident highlights the risks of maintaining unpatched payment infrastructure, especially when hot wallets—used for day‑to‑day transactions—are involved. The breach demonstrates that even well‑known open‑source solutions can be exploited if not updated, underscoring the importance of regular maintenance and security audits.

For users and merchants relying on BTCPay, the theft could erode confidence in the platform’s security and prompt a shift toward alternative payment processors or the adoption of cold‑storage solutions.

While the immediate impact is on the Bitcoin ecosystem, the event may prompt broader scrutiny of hot‑wallet practices across crypto payment services and influence how merchants manage on‑chain liquidity.

Based on reporting from Cointelegraph. Read the original.