BTCPay Server Rushes Out Emergency Patch Amid Bitcoin Security Risk

BTCPay Server, an open-source Bitcoin payment software used by merchants, has issued an emergency update to address a critical security risk. The vulnerability, identified in GitHub pull request #7491, allowed attackers to bypass TOTP two-factor authentication via the Greenfield API Basic Authentication.

This enabled cybercriminals to potentially steal funds from users' wallets and payment providers.

The patch addresses a short-term negative impact on trust among merchants who use BTCPay Server.