BTCPay Server Offers Bitcoin Bounty After Wallet Exploit

BTCPay Server, an open-source cryptocurrency payment processing platform, has confirmed a wallet exploit resulted in stolen funds. In response, the project is offering a recovery bounty worth 10% of any returned funds, capped at 3 Bitcoin, to encourage the attacker or third parties to return the stolen cryptocurrency.

The project has also stated that it will prioritize security patches over new feature development indefinitely, signalling that the exploit has prompted a broader shift toward hardening the platform against further attacks.

While BTCPay Server is primarily used by businesses accepting cryptocurrency payments, the incident is a reminder that any software handling digital funds—whether custodial or self-hosted—can be targeted by attackers exploiting wallet or software vulnerabilities.