BTCPay Server has detected attack paths targeting versions 2.4.1 and earlier.

BTCPay Server reported that its incident response investigation identified an attack path targeting instances running version 2.4.1 and earlier. There are currently no credible reports of users running the latest version 2.4.7 experiencing hot wallet fund theft. The official team urges users to update their software and requests affected users to submit incident details and logs to the security team. BTCPay Server stated that hot wallets on multiple instances were emptied by attackers.