Security · 4 November 2026
BTCPay Server urges upgrade after Bitcoin and Litecoin thefts from versions ≤2.4.1
BTCPay Server reported thefts of Bitcoin and Litecoin from hot wallets on instances running version 2.4.1 (released 23 July 2026) or earlier; the vulnerability was fixed in 2.4.2 (7 August 2026) and users are advised to upgrade to 2.4.7.
Why it matters
Update checkout flows to require merchants run BTCPay Server 2.4.7 or later; older versions risk wallet drains.
For product managers
For your product
What does this mean for your product?
Try it on your product More from this issueAll AI news from 4 Nov →
Get this every morning, written for your product.
Deltaday reads the whole AI news cycle and tells you what changed, whether it's real yet, and what to do about it.