In a troubling turn of events for the cryptocurrency sector, BTCPay Server, an essential service that allows companies to accept Bitcoin payments, has reported a security breach following the significant hack of Binance, the world’s largest crypto exchange, which lost approximately $6.3 billion. The incident has raised alarms as unauthorized transfers of Bitcoin have been flagged on its platform.
Investigation Underway
BTCPay Server has initiated a thorough investigation into these unauthorized transactions. Users have complained about suspicious withdrawals from their hot wallets, prompting the organization to issue an urgent security alert. The team has advised all server operators to disconnect their systems from the internet immediately until further analysis is conducted.

According to the information provided, the attackers targeted systems running versions 2.4.1 and older of BTCPay Server. However, there have been no reports of breaches on systems using the latest version, 2.4.7. Users are encouraged to ensure that their software is updated to minimize vulnerability.
Details Still Emerging
The extent of the breach, including the total amount of Bitcoin that may have been withdrawn, remains uncertain. BTCPay’s leadership has requested that users who suspect they have been affected share their server logs and any relevant information to aid in the investigation.
Nicolas Dorier, a co-founder of BTCPay Server, revealed that the attackers seemingly gained administrator access to the compromised servers, but the method by which they obtained this privilege has not yet been clarified.
As the investigation continues, both BTCPay Server and its users remain on high alert amid these cybersecurity challenges within the cryptocurrency landscape.