Ethical Hacking News
Hackers have exploited a vulnerability in the BTCPay Server to steal Bitcoin and Litecoin from hot wallets on instances running older versions of the software. The attackers targeted servers running the 2.4.1 release or earlier, and were able to steal funds using a different method to exploit the vulnerability that was fixed in the 2.4.2 release. The BTCPay Server has issued an alert, urging users to install the latest version of its software, and Tether has frozen over 4.5 million USDT in connection with a security breach. This incident highlights the need for robust security measures to protect against cyber attacks and the importance of keeping software up to date.
The BTCPay Server, a widely used cryptocurrency payment processor, has been exploited by hackers to steal Bitcoin and Litecoin from hot wallets.A vulnerability in the BTCPay Server 2.4.1 release was discovered and exploited by attackers, who targeted servers running the older version.The BTCPay Server has issued an alert urging users to install the latest version of its software, which addresses several security vulnerabilities.Users are advised to keep only funds needed for daily operations in hot wallets and move the rest to a secure wallet.Another stablecoin issuer, Tether, has also been affected by a security breach, resulting in the theft of $49 million in funds.This incident highlights the importance of keeping software up to date and using robust security measures to protect against cyber attacks.
The cryptocurrency space has recently witnessed a series of high-profile security breaches, with the latest incident involving the exploitation of a vulnerability in the BTCPay Server. The BTCPay Server is a self-hosted, open-source cryptocurrency payment processor that has been widely used by users to facilitate cryptocurrency transactions. However, in a recent report, it was revealed that hackers have been able to steal Bitcoin and Litecoin from hot wallets on instances running older versions of the BTCPay Server.
According to the report, the vulnerability was discovered in the BTCPay Server 2.4.1 release, which was made available on July 23, 2026. The attackers used a different method to exploit the vulnerability that was fixed in the 2.4.2 release, which was made available on August 7, 2026. The attackers targeted servers running the 2.4.1 release or earlier, and were able to steal Bitcoin and Litecoin from hot wallets.
The BTCPay Server has since issued an alert, urging users to install the latest version of its software, which is currently at version 2.4.7. The version addresses one critical and several medium-severity security vulnerabilities that were discovered via Anthropic's OSS scanner. The BTCPay Server has also shared two wallet addresses that were linked to the incidents, which are believed to be the result of the stolen funds.
In a post on X, the BTCPay Server warned users that if they need a hot wallet for daily operations, they should only keep the funds needed for those operations on the server and move the rest to a wallet whose spending keys are held off the server. The BTCPay Server also cautioned users that if they run the server through a hosting provider, their instance may have been shut down automatically to prevent older versions from being exploited.
This incident highlights the importance of keeping software up to date and using robust security measures to protect against cyber attacks. The BTCPay Server has been widely used by users to facilitate cryptocurrency transactions, and it is essential that users take steps to protect their funds and prevent similar incidents in the future.
In a related development, the stablecoin issuer Tether has also been affected by a security breach. The breach resulted in the theft of $49 million in funds, and the stablecoin issuer has frozen over 4.5 million USDT in connection with the incident. This incident highlights the vulnerability of the cryptocurrency space to cyber attacks and the need for robust security measures to protect against such incidents.
Furthermore, this incident is part of a larger trend of security breaches and exploits across the cryptocurrency space. In recent weeks, there have been several high-profile security breaches, including the theft of $6.43 billion from Binance and the compromise of software developed by DebugBear. These incidents highlight the need for robust security measures to protect against cyber attacks and the importance of keeping software up to date.
In conclusion, the exploitation of the vulnerability in the BTCPay Server highlights the importance of keeping software up to date and using robust security measures to protect against cyber attacks. The BTCPay Server has issued an alert, urging users to install the latest version of its software, and Tether has frozen over 4.5 million USDT in connection with a security breach. These incidents highlight the vulnerability of the cryptocurrency space to cyber attacks and the need for robust security measures to protect against such incidents.
Related Information:
https://www.ethicalhackingnews.com/articles/Hackers-Exploit-Vulnerability-in-BTCPay-Server-to-Steal-Bitcoin-and-Litecoin-from-Hot-Wallets-ehn.shtml
https://thehackernews.com/2026/11/hackers-exploit-btcpay-server-flaw-to.html
https://cybersecuritynews.com/btcpay-server-warns/
Published: Tue Nov 3 04:30:18 2026 by llama3.2 3B Q4_K_M
