BTCPay Server warns of hot wallet thefts running on outdated software
BTCPay Server urged operators to shut down their servers after receiving reports of unauthorized attackers draining funds from hot wallets.
This article may contain affiliate links. Commercial relationships are disclosed in the affiliate policy.
What happened
BTCPay Server urged operators to shut down their servers after receiving reports of unauthorized attackers draining funds from hot wallets.
Reported details
- BTCPay Server has warned users to shut down their payment servers after receiving reports of attackers gaining unauthorized access to older installations and draining funds from connected Bitcoin hot wallets. In a November 2 security alert, the open-source Bitcoin payment…
Why this matters
Whether BTCPay Server reaches the custody and settlement layer depends on what it actually names. If it points at a custodian, a redemption term or a withdrawal rule, that is the layer where exposure lives, and the name and its timing are the parts worth checking. If it names none of those, this angle simply does not apply here, and reading custody risk into it would be an assumption rather than a finding.
Evidence boundary
On BTCPay Server, the scope is limited to what the linked 2 reports state, and where they diverge both positions are recorded without either being picked in advance; the headline figure is what to check first.
What to verify
If BTCPay Server names a custodian or a redemption term, check that name and its timing against the operator’s own documentation; if it names neither, there is nothing here to verify on that layer.
Sources and editorial check time
-
Cointelegraph: https://cointelegraph.com/news/btcpay-server-hot-wallet-thefts-older-versions
-
crypto.news Live: https://crypto.news/btcpay-server-warns-of-wallet-drains-urges-server-shutdowns/
-
Editorial source check time: 2026-11-02T06:46:55.793Z
This information is educational and is not financial, legal, or tax advice.