Critical BTCPay Server Flaw Under Active Attack — Update Now

BTCPay Server, a self-hosted platform used to process Bitcoin and Lightning Network payments, has warned users of a critical security flaw that is being actively exploited by attackers. The vulnerability, discovered and disclosed by the Bitcoin Red Team, could allow threat actors to steal funds from affected installations.

In response, BTCPay Server released an emergency update, version 2.4.2, and strongly urged all users to either apply the patch immediately or shut down their instances until they can do so. Because BTCPay Server is self-hosted, the responsibility for patching falls directly on the businesses and individuals running it, rather than a centralised provider.

Any Australian small business using BTCPay Server to accept cryptocurrency payments should treat this as an urgent action item, given the direct financial risk involved.