BTCPay Founder: Theft Reports Appear to Involve Versions Prior to 2.4.2

TechFlow news, November 2, according to BTCPay Server founder Nicolas Dorier, the theft reports received appear to involve versions prior to 2.4.2; attackers logged into affected instances with administrator privileges, and the team is still investigating how the attackers gained access.

Dorier said that public servers running version 2.4.7 were not attacked. TechFlow previously reported that BTCPay Server received reports that hot wallet funds were transferred out by an unauthorized attacker, and advised users to shut down instances until the investigation is complete.

Source: TechFlow