# BTCPay identifies attack targeting older servers after wallet thefts

_Published Monday, November 2, 2026 at 11:29 AM EST · Security · Latest · Tier 2 — Notable_

![BTCPay identifies attack targeting older servers after wallet thefts — Primary](https://www.bleepstatic.com/content/hl-images/2026/10/08/Bitcoin-cryptocurrency.jpg)

BTCPay Server identified an attack targeting instances running version 2.4.1 or earlier after receiving reports of unauthorized Bitcoin and Litecoin payments, BleepingComputer reported. The payment processor's maintainer urged operators to update to version 2.4.7 and recommended taking instances running 2.4.1 or older offline as soon as possible.

The project began receiving theft reports on Sunday evening UTC and asked hosting providers to take affected instances offline. Its investigation confirmed an attack path involving versions earlier than 2.4.2, distinct from the recently disclosed vulnerability that prompted the 2.4.7 emergency release. BTCPay said it had no credible reports of hot wallet drains on the latest version.

## Sources

- [BleepingComputer](https://www.bleepingcomputer.com/news/security/btcpay-server-warns-of-hot-wallet-thefts-targeting-outdated-instances/)

---
Canonical: https://techandbusiness.org/newswire/tLwiNiaRo6Xmizqfj03ITF
Published: 2026-11-02T16:29:15.070Z
Story chronology: 2026-11-02T15:03:07.000Z
Retrieved: 2026-11-02T18:35:55.734Z
Publisher: Tech & Business (techandbusiness.org)