Bitcoin
BTCPay Server Urges Immediate Update Over Critical Exploit
The Bitcoin payment processor warned users of an active exploit targeting a critical flaw and instructed them to upgrade and reset credentials.
BTCPay Server told administrators on Friday to install version 2.4.2 immediately, with instructions to verify the update in the server footer. The company also recommended that users unable to update right away should shut down their servers until patching is possible.
Beyond updating the software, affected users were asked to rotate macaroon credentials—authentication tokens used by the system—delete and regenerate the macaroons.db file, and refresh authentication strings for Lightning Network backends. Those operating hot on-chain wallets in BTCPay were advised to move those funds and recreate the wallet entirely.
The vulnerability was reported by members of the Bitcoin Red Team. However, BTCPay Server has not released details about how the flaw operates, when attacks began, how many servers were affected, or whether any funds were actually lost. The company did not immediately respond to requests for comment.
The incident follows a pattern of AI-assisted security breaches affecting crypto infrastructure. In May, a researcher used Claude Opus to uncover a dormant four-year-old Zcash vulnerability that could have enabled unlimited counterfeiting. In August, Coinkite suggested attackers may have used AI to identify a firmware flaw connected to over $100 million in stolen Bitcoin. This week, Bitcoin swap service Boltz suspended operations after multiple exploits, citing AI-driven attacks outpacing its remediation efforts.
These two are not the same thing, and one does not produce the other. The left is how this single article reads, from its tone alone. The right is the site’s own call on the asset, from indicators and analysis. Press tone feeds no score and no signal: on the only corpus this site has measured, daily tone tracked the move that had already happened and showed no measurable link with what followed.
More on Bitcoin All pieces →
- Neutral Block Files for US National Trust Bank Charter to Consolidate Crypto Custody
- Neutral Tokenized Asset Holders Cross 3.5 Million as Institutional Inflows Rebound
- Neutral Iran Eases Currency Restrictions to Permit Cross-Border Crypto Settlements
- Neutral Block Seeks OCC Approval for Builders Bank & Trust to Manage Digital Assets
Rewritten from the headline, the teaser and the one-line summary the qualification step produced — that is all the material there is, and nothing is added to it. The source link is kept on file so any item can be checked, and is not published here.
