# Outdated BTCPay Server Vulnerability Exploited to Drain Cryptocurrency Wallets

*Published November 4, 2026*
*Source: [https://thehackernews.com/2026/11/hackers-exploit-btcpay-server-flaw-to.html](https://thehackernews.com/2026/11/hackers-exploit-btcpay-server-flaw-to.html)*

## Executive Summary

BTCPay Server users are at risk due to a vulnerability in older software versions that has been exploited to steal cryptocurrencies from hot wallets. Users are urged to update their software to the latest version to protect their assets.

## Article

BTCPay Server, the self-hosted open-source cryptocurrency payment processor, is urging users to update their software following reports of Bitcoin and Litecoin thefts from hot wallets using older software versions. Specifically, instances running BTCPay Server version 2.4.1 or earlier were targeted by attackers who exploited a vulnerability fixed in version 2.4.2. As a precaution, users of these older versions are advised to migrate to a new server and wallet, even if no theft has been detected, considering their systems potentially compromised. Reports of these incidents began surfacing around November 1, 2026, although the precise start of exploitation remains unclear. BTCPay Server has reassured that users running version 2.4.7 have not reported similar wallet drains, thanks to the critical and medium-severity vulnerabilities addressed in this release. Additionally, BTCPay Server shared two wallet addresses linked to the incidents, cautioning users to minimize funds in hot wallets and to store the majority of their assets offline. The situation highlights a broader trend of security breaches in cryptocurrency, with significant attacks also reported on Binance, Polymarket, and Mercado Bitcoin. In a swift response, partners like Tether have worked to block some stolen assets, showcasing coordinated efforts to mitigate the impact of such breaches.