Skip to content
$BTC$77,869−0.1%$ETH$2,284+0.7%$SOL$93.98−1.5%$XRP$1.25−0.7%$TON$1.780.0%MCap$2.02T+29.5%BTC.D77.1%Fear&Greed37 FearGas0.07 gwei·1 sat/vBNews mood3% bullish
Basis Desk

New from Basis Desk: free Telegram proxies for places where Telegram is blocked or slowed down.Connect in one tap →

Security & Hacks · 1 min read

BTCPay Server Links Hot-Wallet Sweeps to Deployments on Version 2.4.1 and Older

Developers urge operators running legacy software to upgrade, reporting no credible drains on the current 2.4.7 release.

Editorial oversight: Julian Mercer, Chief Editor
Bearish
$BTC $77,869 −0.1%

At a glance

What happened
BTCPay Server confirmed hot-wallet drain incidents are linked to versions 2.4.1 and older, urging immediate updates to version 2.4.7.
Why it matters
Merchants running unpatched self-hosted payment instances risk complete automated loss of hot-wallet funds.
Who is affected
BTCPay Server operators and merchants running software versions 2.4.1 or older.
What's next
No next step announced.
Primary source
thedefiant.io: BTCPay Links Hot-Wallet Drains to Versions 2.4.1 and Older

Key points

  • BTCPay Server confirmed hot-wallet drains are linked to software deployments running version 2.4.1 and older.
  • The development team announced that there are no credible reports of unauthorized drains on version 2.4.7.
  • Operators had previously been urged to shut down instances following initial detections of automated hot-wallet sweeps.

Open-source payment processor BTCPay Server has linked recent hot-wallet drainage incidents directly to instances operating on version 2.4.1 and older 1.

Following the unauthorized asset removals, the development team explicitly advised server administrators to upgrade their deployments to the most recent release 1. According to the team, there have been no credible reports of wallet compromises on version 2.4.7 1. The advisory follows earlier notices in which BTCPay Server urged system operators to shut down vulnerable services after detecting automated hot-wallet sweeps 1.

Operator Guidance and Infrastructure Response

The project maintains that updating node instances remains necessary for protecting merchant balances 1. While previous alerts instructed administrators to halt instances upon early reports of hot-wallet sweeps, current directives focus on bringing installations forward from version 2.4.1 or older releases to release 2.4.7 1.

The software issues emerge alongside broader infrastructure security concerns across the crypto ecosystem, including separate incidents such as the Coldcard Firmware Vulnerability Leads to $116M Bitcoin Self-Custody Theft 1. At the time of writing, $BTC traded at $77,994 as merchants and autonomous payment processors assess potential exposure across self-hosted infrastructure.

Sources

  1. [1] BTCPay Links Hot-Wallet Drains to Versions 2.4.1 and Older — thedefiant.io, November 2, 2026

Written by Basis Desk's newsroom system from the primary sources above and machine-verified against them before publication. Market figures marked "at the time of writing" come from live exchange data. Report an error: corrections@basisdesk.news · corrections policy.

Community read
How do you read this story for the assets involved? One vote a day, anonymous.
Be the first to vote
Share X Telegram Bluesky Markdown

The Daily Brief, in your inbox at 07:00 ET

Five stories, the numbers that moved, what to watch. Three minutes. No hype, no advice, unsubscribe in one click.

Not financial advice. Basis Desk publishes information, not recommendations. Crypto assets are volatile and you can lose what you invest.