Attack vector targets versions 2.4.1 and earlier; BTCPay Server says no credible reports of hot wallet theft for 2.4.7

Odaily: The BTCPay Server project team stated that its incident response investigation has identified an attack vector targeting instances running version 2.4.1 (released on July 23, 2026) or earlier. The team said there are currently no credible reports of hot wallet theft among users running the latest version 2.4.7, and once again advised users to keep BTCPay Server updated; affected parties can submit details and logs to security@btcpayserver.org.