BTCPay Urges Users to Shut Down Servers After Wallet Drain Reports

BTCPay wallet drain — The developers of open-source Bitcoin payment processor BTCPay have advised users to shut down their servers following reports of drained wallets, while the team investigates the potential vulnerability.

The BTCPay project stated it is actively investigating the issue but has not yet provided a total loss figure or announced a definitive fix. In a post on social media platform X, the project’s founder, Nicolas Dorier, indicated that the reports appear to involve instances running software versions older than 2.4.2.

The urgent advisory to stop servers is a precautionary measure while the core team works to understand the scope and root cause of the incident. BTCPay is a popular self-hosted solution that allows merchants to accept Bitcoin payments directly without intermediaries.

The incident highlights the operational security risks inherent in self-custody and self-hosted financial infrastructure. Users of the software are awaiting further instructions and a patch before safely resuming operations.