BTCPay Server Warns of Hot Wallet Crypto Thefts on Outdated Instances

# BTCPay Server Warns of Hot Wallet Crypto Thefts on Outdated Instances

https://gcdradar.vercel.app/incidents/btcpay-server-warns-of-hot-wallet-crypto-thefts-on-outdated · AIR-2026-1717 · live

- Lane: Patch now
- Severity: 3 (Confirmed exploitation): Active exploitation resulting in hot wallet theft.
- Fix status: Patched
- First reported: 2026-11-02
- AI role: No AI role
- Products: BTCPay Server

## Summary

The maintainer of BTCPay Server urged users to update after hackers drained hot wallets on outdated instances. Users running older versions are advised to upgrade immediately.

## What to do

Install the latest version of BTCPay Server.

## Affected and fixed versions

- Affected: BTCPay Server older versions
- Fixed in: latest version

## Latest updates

- 2026-11-03: Hot wallet crypto thefts are confirmed to target instances running BTCPay Server 2.4.1 or earlier. (https://thehackernews.com/2026/11/hackers-exploit-btcpay-server-flaw-to.html)
- 2026-11-02: BTCPay Server warns of hot wallet crypto thefts on outdated instances (https://bleepingcomputer.com/news/security/btcpay-server-warns-of-hot-wallet-thefts-targeting-outdated-instances)

## Sources

- 2026-11-02 BleepingComputer: BTCPay Server warns of hot wallet crypto thefts on outdated instances https://bleepingcomputer.com/news/security/btcpay-server-warns-of-hot-wallet-thefts-targeting-outdated-instances
- 2026-11-03 The Hacker News: Hackers Exploit BTCPay Server Flaw to Steal Bitcoin and Litecoin From Hot Wallets https://thehackernews.com/2026/11/hackers-exploit-btcpay-server-flaw-to.html

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.