BTCPay founder: Breach report appears to involve versions prior to 2.4.2

According to TechFlow, on November 2, BTCPay Server founder Nicolas Dorier stated that the received theft reports appear to involve versions prior to 2.4.2, with attackers logging into affected instances as administrators. The team is still investigating how the attackers managed to log in.

Dorier noted that public servers running version 2.4.7 of the project have not been targeted. TechFlow previously reported that BTCPay Server received reports of unauthorized attackers transferring funds from hot wallets, and advised users to shut down their instances before the investigation concludes.