coin-img-BTCBTC+1.30%coin-img-ETHETH+1.10%coin-img-SOLSOL+2.65%coin-img-HEIHEI-0.30%coin-img-XRPXRP+1.84%coin-img-USDCUSDC-0.03%coin-img-HYPEHYPE-1.75%coin-img-TRXTRX-0.03%coin-img-BTCBTC+1.30%coin-img-ETHETH+1.10%coin-img-SOLSOL+2.65%coin-img-HEIHEI-0.30%coin-img-XRPXRP+1.84%coin-img-USDCUSDC-0.03%coin-img-HYPEHYPE-1.75%coin-img-TRXTRX-0.03%coin-img-BTCBTC+1.30%coin-img-ETHETH+1.10%coin-img-SOLSOL+2.65%coin-img-HEIHEI-0.30%coin-img-XRPXRP+1.84%coin-img-USDCUSDC-0.03%coin-img-HYPEHYPE-1.75%coin-img-TRXTRX-0.03%coin-img-BTCBTC+1.30%coin-img-ETHETH+1.10%coin-img-SOLSOL+2.65%coin-img-HEIHEI-0.30%coin-img-XRPXRP+1.84%coin-img-USDCUSDC-0.03%coin-img-HYPEHYPE-1.75%coin-img-TRXTRX-0.03%

BTCPay Server Flags Critical Vulnerability Under Active Exploitation, Tells Admins to Upgrade

AI Market Summary
BTCPay Server disclosed a critical vulnerability under active exploitation that could enable unauthorized access and potential fund losses, urging immediate upgrades or shutdowns plus credential rotation and wallet migration. While impact is localized to merchants and self-hosted payment processors, the event raises near-term operational and security risk across Bitcoin commerce and Lightning-linked backends. Lack of disclosed scope or confirmed losses adds uncertainty and can dampen sentiment.
Impact level
● Medium
Affected assets
BTC/USDT+1.31%
AI Insight · BTC/USDTAI Insight
▼ Bearish
Trade now
⚠️ AI-generated insights are based on news content and are provided for informational purposes only. They do not constitute investment advice or represent the views of BingX. Investing involves risk. Please trade responsibly.
BTCPay Server said on X on Aug. 8 that it has identified a critical vulnerability in its Bitcoin payment processing platform that is currently being actively exploited, potentially enabling unauthorized access and leading to losses of funds, according to ChainThink. The project is instructing administrators to upgrade to version 2.4.2 and verify the update is complete by checking the server footer. If an immediate upgrade is not possible, BTCPay Server recommends temporarily shutting down the service to reduce exposure. BTCPay Server also advised users to rotate potentially exposed macaroon credentials, rebuild the macaroons.db file, and refresh authentication strings for other Lightning Network backends. For users running a hot wallet created within BTCPay Server, the guidance is to move funds out and recreate the wallet. BTCPay Server has not disclosed technical details of the flaw, when the attacks began, how many servers are affected, or whether any funds have been stolen. The issue was reported by a member of the Bitcoin Red Team.
Selected
BTC
BTC+1.30%
Disclaimer: The content above is only the author's opinion and does not represent BingX’s stance. It shall not be construed as investment advice from BingX. For details, refer to the Terms and Conditions.

Risk Warning

Cryptocurrencies and their derivatives are innovative financial products with great volatility and high investment risks.

Although BingX is committed to providing users with easy-to-use trading tools, trading itself is still a highly sophisticated field. Trading digital assets and their derivatives are subject to high market risk and price volatility and may result in partial or total loss of account funds. You must carefully consider and exercise clear judgment to evaluate your financial situation and the aforementioned risks before using BingX Services. You shall be responsible for all losses arising therefrom. If necessary, please consult relevant professionals to make informed decisions before investing. By accessing, downloading, using or clicking on "I agree" to accept any BingX Services provided by BingX, you agree that you have read, understood and accepted all of the terms and conditions stipulated in BingX Terms of Use as well as our Privacy Policy.


Trading by copying or replicating the trades of other traders involves a high level of risks, even when copying or replicating the top-performing traders. Past performance of a BingX community member is not a reliable indicator of his future performance. Content on BingX's trading platform is generated by members of its community and does not contain advice or recommendations by or on behalf of BingX.