Bitcoin payments tool BTCPay Server reportedly urged users Sunday (Nov. 1) to shut off their servers following word of an attack.
Complete the form to unlock this article and enjoy unlimited free access to all PYMNTS content — no additional logins required.
That’s according to a report Monday (Nov. 2) from CoinDesk, which says the attackers in question were draining so-called “hot wallets” on some of those servers.
BTCPay’s open-source software lets anyone run the system on their servers, the report said. As there are no middlemen, businesses accept bitcoin payments directly into their own wallets, and BTCPay allows them to run these as hot wallets, which remain connected to the internet.
Please add us to your preferred sources list so our news, data and interviews show up in your feed. Thanks!
According to CoinDesk, the ease of these transactions also comes with risks. For example, merchants’ servers can send coins on their own, without the merchant approving it. This means anyone who hacks into a server can send that crypto to their own address.
And because every merchant hosts the software on their own servers, there is no “master switch” to hit if something goes wrong, the report added. It’s why BTCPay needed to ask each server owner to shut down, as it can’t do it for them, CoinDesk added.
“We are receiving reports of hot wallets on BTCPay Servers being swept by unauthorized attackers. sh) until we complete the investigation,” BTCPay said in a post on X.
Source link







