Digital Asset
Intelligence
Security Incident

BTCPay Server Security Incident

·Source-attributed incident record

Incident Overview

BTCPay Server reported that hot wallets on multiple instances are being swept by unauthorized attackers. The project urgently advised all operators to shut down their instances immediately using ./btcpay-down.sh until the investigation is complete.

Sources & References

Original incident referencehttps://x.com/BtcpayServer/status/2117020340815819262 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Attack methodUnauthorized Signing Access
    Reported loss$ 1,628,450
  2. Incident date
    Attack methodSigning Capability Compromise
    Reported loss$ 49,000,000
  3. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 10,000
  4. Incident date
    Target

    $TENDRIL

    Attack methodSmart Contract Vulnerability
    Reported loss$ 555000
  5. Incident date
    Attack methodUnknown
    Reported lossNot disclosed