BTCPay Server founder Nicolas Dorier stated that reports of hot wallets being drained on its servers involved software releases older than version 2.4.2, specifically targeting instances running version 2.4.1 or earlier released July 23, 2026

From the articleBTCPay Server Identifies Attack Vector After Bitcoin Wallet Theft ReportsAlso in BTCPay tells users to turn off their servers after reports of drained wallets