BTCPay Server warned operators at about 22:25 UTC on Nov. 1 that it was receiving reports of attackers draining hot wallets, and told them to shut down their servers. The source does not supply a year for the alert. Developers had not disclosed how much bitcoin was stolen, how many merchants were affected or how attackers entered the systems.
Founder Nicolas Dorier said preliminary findings pointed to affected servers running versions older than 2.4.2 and to attackers gaining administrator access. Public and demonstration servers running version 2.4.7 had not been attacked, he said, but investigators had not established that all current installations were safe or identified the weakness behind the thefts. No incident-specific patch or all-clear had been announced in the supplied updates.
