BTCPay Server vulnerability: about $1.63M traced to theft-linked addresses
Attackers exploited a BTCPay Server vulnerability to drain hot wallets on servers running version 2.4.1 and older, even though a patch was released August 7. Bitquery linked about $1.63 million in Bitcoin and Litecoin to the theft-related addresses, with 682 wallet sweeps between October 30 and November 2. Operators are told to rebuild with fresh wallets and seeds.