BTCPay Server: Hot Wallet Hit by Unauthorized Attack; Users Advised to Suspend Service Operations

An official notice issued on November 2 stated that BTCPay Server—an open-source, self-hosted cryptocurrency payment processing platform—had suffered a security incident: reports indicated that its hot wallet was being used by unauthorized attackers to move funds. All users running BTCPay Server instances must immediately shut down their services and refrain from restarting them until the investigation concludes.