Bitcoin payment processor BTCPay Server warns of an actively exploited vulnerability that could lead to stolen funds.
BTCPay Server alerted users to a critical vulnerability under active attack, urging immediate updates to version 2.4.2 or server shutdowns. The flaw could result in unauthorized access and stolen funds, though the project has not disclosed specifics on compromised servers or losses.
The company advised replacing credentials, recreating the macaroons.db file, and moving funds from hot wallets. The vulnerability was reported by Bitcoin Red Team members, but details on its mechanics or attack timeline remain undisclosed.
While no funds have been confirmed stolen, the incident highlights growing security risks in crypto infrastructure. Recent months have seen AI tools uncovering long-standing vulnerabilities in blockchain projects.