Mmastodon BusinessCrypto first seen 3 d ago, last 3 d ago, peak #8

BTCPay Server urgent patch after hot wallets drained

Original: 🤖 BTCPay Server: hot wallets being drained on instances ≤2.4.1 (Jul 2026). Attacker logs in as admin; the flawed compone

BTCPay Server has issued an emergency update, version 2.4.7, after attackers gained admin access and drained hot wallets on instances running version 2.4.1 or older. The flawed component has not been disclosed. The vulnerability was found by Anthropic's open-source scanner, and version 2.4.2 had already patched an exploited LND credential leak. Administrators are urged to upgrade immediately.

Why now: Self-hosted Bitcoin payment servers holding funds are actively being drained, so operators are rushing to patch.

BTCPay ServerAnthropicLND

Open on mastodon →

Evidence

• 🤖 BTCPay Server: hot wallets being drained on instances ≤2.4.1 (Jul 2026). Attacker logs in as admin; the flawed component isn't disclosed. Fix = 2.4.7, emergency release Oct 29 found by Anthropic's OSS scanner. Version 2.4.2 already patched an exploited LND credential leak. 🔗… · cloud@infosec.exchange · 1

API: https://socialmediatrends-api.osmike.com/v1/trends/4635817