BTCPay Reports BTC and LTC Wallet Theft
BTCPay Server developers have warned of attacks targeting merchant servers running outdated versions of the payment software. Attackers gained access to hot wallets and moved the funds stored in them. According to Bitquery’s investigation, approximately $1.63 million in BTC and LTC was taken between October 30 and November 2 across 682 transactions. BTCPay initially urged operators to shut down their servers while the incident was investigated. Developers later identified an attack vector affecting versions 2.4.1 and older; no credible reports of similar hot-wallet drains were identified for the latest 2.4.7 release. Operators should update their software and review wallet security. When exchanging crypto on xbit.money, users should also double-check destination addresses and network selection before confirming a transfer.