BTCPay server warns of critical vulnerability, urges immediate update
BTCPay Server has disclosed a critical vulnerability being actively exploited, with funds at risk.
According to the announcement, operators must update to version 2.4.2 immediately, or take their server offline entirely until they can patch. The warning comes amid a broader period of heightened security alerts across bitcoin infrastructure, following the recent Coldcard hardware wallet hack.
BTCPay Server is a free, open-source, self-hosted bitcoin payment processor that lets merchants accept bitcoin and lightning payments directly to their own wallets, with no fees or middleman.
