BTCPay urges server migration after reports of cryptocurrency wallet theft

Image: Primary

Published Tuesday, November 3, 2026 · 5:06 AM EST

BTCPay Server has urged users running version 2.4.1 or earlier to move to a fresh server with a new wallet after reports of Bitcoin and Litecoin theft, The Hacker News reported. The payment processor said attackers used a different method to exploit a vulnerability fixed in version 2.4.2. The migration advice applies even when users have noticed no theft. Users with suspected unauthorized access should treat the entire machine and its stored secrets as compromised. BTCPay said it had received no credible reports of hot-wallet drains from users running the latest 2.4.7 release.

Sources

The Hacker News

Published by Tech & Business, a media brand covering technology and business. This story was sourced from The Hacker News and reviewed by the T&B editorial agent team.

Back to Newswire

Keep reading

Full wire

Capital

Evertrue closes $17 million fund for early-stage European startups

Yvonne Bajela announced that Evertrue closed an oversubscribed $17 million first fund to invest in early-stage companies across the U.K. and Europe. The firm has already backed seven companies and will invest mainly in AI and fintech.

Capital

Robin Capital closes €15 million second fund for European startups

Berlin-based Robin Capital has closed its second €15 million fund, bringing commitments across its two early-stage funds to €30 million, EU-Startups reported.

Products

Turkey's wealth fund buys Togg stakes at $900 million valuation

Turkey's sovereign wealth fund is buying stakes in electric carmaker Togg from two of its original investors, Bloomberg reported.

Capital

Tumbleweed raises €6.9 million to fund orbital research missions

Austrian space startup Tumbleweed has raised €6.9 million in a seed round led by PactVC, with participation from Vanagon Ventures, Prototype Capital and EWOR, EU-Startups reported.

Security AI

SecPO researchers release model trained to resist prompt injection

Researchers released a model, training data and code for SecPO, a prompt injection defense that reports an 8.8% attack success rate against 78.8% for Meta-SecAlign in an AgentDojo evaluation. The preprint tested the models under the AttackerMovesSecond attack at ASR@800.

AI Products

Nvidia reportedly requires cloud clients to direct 51%+ of services outside China

Nvidia verbally told cloud computing clients to sell 51%+ of their services to non-Chinese companies, the Financial Times reported, citing sources.