Key facts
- BTCPay Server is under active attack.
- The attack is due to a critical vulnerability.
- Users are advised to update to version 2.4.2.
- Users can also shut down their servers.
- The vulnerability could lead to fund theft.
BTCPay Server, a popular Bitcoin payment processor, has issued an urgent warning to its users regarding an active attack exploiting a critical vulnerability within its system. The platform is urging all users to update their software to version 2.4.2 as soon as possible to safeguard their funds. The vulnerability poses a significant risk, with attackers actively exploiting the flaw to potentially steal user assets. For those unable to update immediately, BTCPay Server recommends shutting down their servers as a temporary measure to prevent any unauthorized access or theft. The severity of the situation underscores the importance of prompt security updates for financial platforms handling sensitive data and assets.