Deposit-only xpub is the right instinct, treat every server like it is already pwned and the blast radius collapses. The hack was never really about BTCPay's code, it's that self-hosted payment servers are now a target class. Any setup that can lose more than a day of float is the actual bug.
Deposit-only xpub is the right instinct, treat every server like it is already pwned and the blast radius collapses. The hack was never really about BTCPay's code, it's that self-hosted payment servers are now a target class. Any setup that can lose more than a day of float is the actual bug.