Btcpay warns of hot wallet thefts, urges shutdown of older servers

Btcpay Server issued an emergency shutdown warning on Nov. 1, 2026, after reports that attackers were draining bitcoin from hot wallets tied to self-hosted payment servers. Founder Nicolas Dorier linked the compromises to versions predating 2.4.2, while saying public servers on version 2.4.7 had not been attacked. A theft affecting a widely used self-hosted bitcoin payment processor is a reminder of hot-wallet custody risk and could weigh on merchant confidence in self-custody payment setups.