Btcpay-Server on CuraSechttps://curasec.metacog.co.kr/tags/btcpay-server/Recent content in Btcpay-Server on CuraSecHugoen-usTue, 03 Nov 2026 18:24:39 +0000Active Exploitation of BTCPay Server Flaw Drains Hot Walletshttps://curasec.metacog.co.kr/insights/2026-11-03-hackers-exploit-btcpay-server-flaw-to-steal-bitcoin-and-lite/Tue, 03 Nov 2026 18:24:39 +0000https://curasec.metacog.co.kr/insights/2026-11-03-hackers-exploit-btcpay-server-flaw-to-steal-bitcoin-and-lite/<ul> <li><strong>Engineer — Act:</strong> Active exploitation confirmed with real financial losses; update BTCPay Server to the latest version (anything beyond 2.4.1, released July 23, 2026) immediately on any self-hosted instances, and audit hot wallet balances for unauthorized withdrawals.</li> <li><strong>SOC/IR — Plan:</strong> Exploitation is confirmed but this summary provides no IOCs, TTPs, or log artifacts to hunt on; inventory any BTCPay Server deployments in the estate, check running versions against the vulnerable ≤2.4.1 threshold, and flag for the engineer team — revisit if technical indicators surface.</li> <li><strong>Leader — Skip</strong></li> </ul>