BTCPay Server: Multiple instances' hot wallets compromised, immediate shutdown recommended.

PANews November 2 news: BTCPay Server posted on X platform that reports have been received that the hot wallets of multiple BTCPay Server instances are being drained by unauthorized attackers. The official recommendation is that users running instances immediately shut down their servers (execute ./btcpay-down.sh) until the investigation is complete. The cause of the attack and the scale of losses have not yet been disclosed. Previously, on October 29, BTCPay Server released emergency update 2.4.7 to fix 1 critical and multiple medium-severity security vulnerabilities.