BTCPay Issues Urgent Warning as Actively Exploited Vulnerability Puts Bitcoin Funds at Risk

BTCPay Server issued an urgent security warning after discovering a critical vulnerability that is actively being exploited. Because BTCPay is a widely used open-source Bitcoin payment processor, the issue raises immediate concern for merchants and node operators who rely on it to receive and manage payments. The team instructed users to update to version 2.4.2 immediately via the admin dashboard and, if patching cannot be done right away, to shut down the server to reduce the risk of fund loss or unauthorized access. No specific exploit details or total losses have been disclosed yet, which adds uncertainty for the ecosystem. The alert comes amid broader caution around crypto custody infrastructure after a recent Coldcard wallet vulnerability, reinforcing a defensive tone across Bitcoin-related software and hardware providers.