BTCPay Server urges users to shut down nodes following wallet drain reports

Popular Bitcoin payment tool BTCPay Server has encountered a severe security incident. The developers are strongly advising users to temporarily turn off their servers following alarming reports of funds disappearing from user wallets.

• Reports surfaced regarding unauthorized withdrawals from user wallets
• BTCPay developers urgently called for shutting down servers
• Security audits and investigations are currently underway
• Users are advised to await official updates before restarting nodes

What happened to BTCPay Server According to recent updates from the payment tool's developers, security compromises have been reported across the network. Malicious actors apparently managed to gain access to user assets, leading to drained wallets on affected instances. The project team responded swiftly by demanding a halt to server operations until all circumstances of the incident are clarified. Experts are currently investigating the matter to identify the attack vector and potential software vulnerabilities. Since BTCPay Server is an open-source decentralized solution, the security of self-hosted instances relies heavily on timely patches.

Safety measures for users If you are running a self-hosted instance of BTCPay, it is strongly recommended to follow the security team's instructions immediately. Shutting down the server will help prevent further unauthorized transactions and safeguard remaining funds. Experts advise against turning the nodes back on until an official statement is released confirming that the threat has been neutralized and a secure update has been deployed. Checking server logs for suspicious activity is also recommended.

Implications for the community For merchants and users accepting cryptocurrency through this platform, the incident serves as a serious reminder of the risks associated with self-hosted payment gateways. Such vulnerabilities highlight the challenges of maintaining robust security in decentralized environments. The team is expected to release a detailed post-mortem and security patch shortly. Developers continue to urge the community to stay vigilant and rely only on official channels for instructions.