BTC Pay Server Recommends Immediate Shutdown Due to Online Wallet Fund Theft Report

The BTC Pay server has received reports of fund theft from online wallets and has recommended immediate shutdown to its operators. The scale of the damage and the attack vector have not been disclosed. The operations team reported that unauthorized attackers were siphoning funds through their official X account and requested server operators to execute shutdown commands and suspend services until the investigation is complete. The BTC Pay server is open-source software that allows stores or individuals to receive Bitcoin payments, and individual operators must manually shut it down. The online wallet that received the fund theft report signs transactions and transfers funds from a server connected to the internet. The path through which wallet access was compromised has not been confirmed. The initial warning did not specify the number of affected servers, the amount stolen, or any vulnerable settings or software versions. The operations team released an emergency security update, version 2.4.7, on the 29th of last month, but it has not disclosed whether this fund theft is related to the vulnerability. In August, there was an incident where credentials were stolen from the Lightning Network's operating software, leading to fund leakage.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.