BTCPay servers are currently under attack due to a critical vulnerability. We urge users to update immediately

The Bitcoin payment processor BTCPay Server has issued a warning, stating that a critical security vulnerability is being actively exploited by attackers, and is urging all operators to take immediate action. In an official post on X (formerly Twitter) on Friday, BTCPay Server requested that administrators immediately update to version 2.4.2 and verify the update completion in the server's footer. If an immediate update is not possible, the company emphasized that the server should be completely shut down to prevent unauthorized access. It also recommended replacing the macaroon used in the Lightning Network backend, regenerating the macaroons.db file, and renewing other authentication strings. For operators who have created hot on-chain wallets within BTCPay, the company also stated that they should immediately move the funds from those wallets to a different location and create new wallets. This vulnerability was reportedly discovered and reported by researchers from the Bitcoin Red Team. However, BTCPay Server has not yet disclosed specific details about how the vulnerability works, when the attacks began, the number of servers affected, or whether any funds have actually been stolen. The company has not responded to requests for comment from Decrypt. This incident comes amid a growing trend of AI-powered crypto security attacks across the industry. In May, security researcher Taylor Hornby used Anthropic's Claude Opus 4.8 to discover a vulnerability in Zcash that had gone unnoticed for four years. This vulnerability was a serious flaw that would have allowed attackers to forge ZEC tokens without limit. In August, cold card manufacturer Coinkite suspected that attackers were using AI to discover a firmware flaw linked to the theft of over $100 million in Bitcoin. Most recently, the Bitcoin swap service Boltz temporarily suspended its services after multiple exploits, warning that AI-assisted attacks are identifying vulnerabilities faster than their team can fix them. While BTCPay Server has not yet officially confirmed whether AI was involved, this incident is drawing attention as an example of how AI-based security threats are accelerating across the industry.