BTCPay Server hacked: Attackers drain Bitcoin wallets

BTCPay Server, the open-source Bitcoin payment processor, has warned users of an active attack draining Bitcoin wallets, with older software versions apparently affected. The company disclosed the security incident via its official channels, urging users to check whether they are running a vulnerable release. No specific figures on stolen funds, affected wallets, or the exact versions exploited were provided in the initial warning. The incident matters because BTCPay Server is widely used by merchants and self-custody users for direct Bitcoin payment processing, making any wallet-draining vulnerability a direct threat to user funds. Users should watch for updated guidance from BTCPay Server on which versions are affected and for a patched release.