Hackers Exploit BTCPay Server Flaw to Steal Bitcoin and Litecoin From Hot Wallets

BTCPay Server, a cryptocurrency payment processor, has advised users to update to the latest software version due to a flaw being exploited by hackers. The vulnerability is being used to steal Bitcoin and Litecoin from hot wallets on servers running older versions of the software. The attacks specifically targeted servers running version 2.4.1 or earlier of BTCPay Server. An investigation by BTCPay Server confirmed that these older versions are vulnerable to the attacks. Users are recommended to install the latest version to protect themselves from the theft. The issue affects servers that have not been updated since July 23, 2026.