BTCPay Server Hit by Critical Vulnerability Attack, Official Team Urges Users to Upgrade Immediately and Rotate Credentials

TechFlow reports, August 8, according to Decrypt, the Bitcoin payment processing project BTCPay Server issued a security warning stating that its server has a critical vulnerability that is being actively exploited.

The vulnerability could be exploited by attackers to gain unauthorized access, potentially leading to loss of user funds. BTCPay Server requires administrators to immediately upgrade to version 2.4.2 and confirm that the server footer indicates the upgrade is complete.

The official team stated that if the upgrade cannot be completed promptly, users are advised to temporarily shut down BTCPay Server to reduce the risk of further attacks.

Additionally, BTCPay Server advises users to replace potentially exposed macaroons credentials, recreate the macaroons.db file, and refresh authentication strings for other Lightning Network backends.