BTCPay Server Issues Emergency Advisory Over Critical Vulnerability

BTCPay Server issued an emergency advisory on August 7 to warn users of a critical security vulnerability that is already being exploited in the wild. The team urged users to update their servers to version 2.4.2 immediately or shut them down entirely.

The vulnerability affects any version prior to 2.4.2, and users can perform the upgrade through the admin dashboard. The team advised verifying the update by checking that '2.4.2' appears in the footer of the application after installation.

For those who cannot update immediately, the guidance is clear: turn off the server to prevent potential exposure. A full post-mortem will be published in the coming days to shed light on the nature of the exploit and the scope of any financial damage.