📢 Our incident response investigation identified an attack vector targeting instances running versions 2.4.1 (Jul 23, 2026) or older.

We have no credible reports of hot wallet drains for users running the latest 2.4.7 release. We again urge everyone to keep their BTCPay Server updated.

If you were impacted, please send all details and logs to security@btcpayserver.org

[If you run BTCPay Server through a hosting provider, your instance may have been shut down automatically to keep older versions from being exploited.

We thank @LunaNode and other hosting providers for their swift action after our initial announcement.