BTCPay Server warns operators to shut down their BTCPay installations after reports of unauthorized attackers draining funds from hot wallets. The project says it has received reports of thefts but is still investigating what happened and how the intrusions occurred.
Both outlets describe the issue as affecting hot wallets tied to running servers, with the project urging immediate action rather than waiting for a confirmed technical fix. CoinDesk adds that the reports being investigated appear to involve older software versions, specifically older than 2.4.2, while Cointelegraph likewise points to outdated software as a likely factor. CoinDesk also notes that BTCPay has not released a loss estimate and has not yet announced a definitive fix. While details remain limited across coverage, the consistent message is to stop potentially exposed servers pending further findings.
Overall, the difference in emphasis is mainly on specificity: CoinDesk highlights version timing (older than 2.4.2) and the lack of quantified losses, while Cointelegraph focuses on the warning and the hot-wallet drainage pattern.
