BTCPay Server Hot-Wallet Drains
Attackers abused a pre-2.4.2 vulnerability to gain admin access to outdated self-hosted BTCPay Server instances and swept roughly $1.6M in BTC and LTC from merchant hot wallets.
Loss
1.6M
USD
Victim dossier
BTCPay Server merchants
Total losses
$1.6M
1 incident