# BTCPay Server tells users to update after hot wallets drained on version 2.4.1 and older

Source: Searchable (https://searchable.pk/news/crypto/btcpay-server-tells-users-to-update-after-hot-wallets-drained-on-version-241-and)
Type: News article
Author: Searchable Editorial
Published: 2 Nov 2026
Updated: 2 Nov 2026
Retrieved: 2 Nov 2026

> The open-source bitcoin payment tool first told operators to switch their servers off, then traced the attacks to older versions. Bitcoin held near $78,000 as the market absorbed the Binance hack.

**BTCPay Server, the open-source software many shops use to accept bitcoin, has told operators to update after attackers drained funds from users' hot wallets.** On Monday 2 November 2026 the project said its investigation had found an attack vector affecting **version 2.4.1 or earlier**, and that it had no credible reports of drains among users on the latest release, **2.4.7**, [Cointelegraph reported](https://cointelegraph.com/news/btcpay-server-hot-wallet-thefts-older-versions). Earlier, it had told operators to [switch their servers off](https://www.coindesk.com/tech/2026/11/02/btcpay-a-bitcoin-payment-tool-tells-users-to-switch-off-their-servers-after-reports-of-drained-wallets) while it investigated, CoinDesk reported.

## What we know

- **Who is affected:** operators running BTCPay Server 2.4.1 (released 23 July 2026) or older, with a **hot wallet**, meaning keys kept on the server so it can send funds automatically.
- **What to do:** update to 2.4.7. BTCPay has asked anyone hit to send details and logs to its security team.
- **What is not known yet:** how many operators lost money, how much was taken and exactly how the attackers got in. BTCPay has not said.
- **Earlier trouble:** in August BTCPay restricted remote Lightning access after an attack that stole LND (Lightning Network Daemon) credentials and funds. It is not clear whether the two are linked.

## Who in Pakistan should care

BTCPay is self-hosted: a merchant or freelancer runs it on their own server rather than signing up with a company. Pakistani freelancers and small online sellers who take bitcoin from overseas clients through their own BTCPay install should check their version today. If you only hold bitcoin on an exchange or in a phone wallet, this does not touch you directly.

The basic lesson holds either way: keep only what you need for day-to-day payments in a hot wallet, and move the rest to cold storage you control.

## The market: steadier after the Binance hack

The BTCPay news landed as the market was settling after the record Binance hack. Bitcoin was at about **$78,013** on Monday on our [bitcoin price page](/data/btc-usd), roughly flat on Sunday. At the interbank rate of Rs 276.75 a dollar ([USD to PKR](/data/usd-pkr)), one bitcoin comes to about **Rs 21.6 million**. CoinDesk reported bitcoin clawing back toward $79,000 as traders shrugged off the hack, and Cointelegraph said Binance's net outflows reached $5.8 billion once withdrawals resumed. Our earlier story covers [the Binance hack and the withdrawal pause](/news/crypto/binance-hacked-withdrawals-paused-after-up-to-dollar57-billion-drained-dollar25).

Our [currency converter](/tools/finance/currency-converter) turns any dollar amount into rupees at today's rate.

## Frequently asked questions

**Which BTCPay Server versions are affected?**

BTCPay says the attack vector it found affects version 2.4.1 or earlier. It had no credible reports of hot wallet drains on the latest release, 2.4.7, and urged operators to update.

## Sources

- BTCPay Server warns of hot wallet thefts running on outdated software (2 Nov 2026) (Cointelegraph): https://cointelegraph.com/news/btcpay-server-hot-wallet-thefts-older-versions
- BTCPay, a bitcoin payment tool, tells users to switch off their servers after reports of drained wallets (2 Nov 2026) (CoinDesk): https://www.coindesk.com/tech/2026/11/02/btcpay-a-bitcoin-payment-tool-tells-users-to-switch-off-their-servers-after-reports-of-drained-wallets

How to cite: "BTCPay Server tells users to update after hot wallets drained on version 2.4.1 and older", Searchable, 2 Nov 2026, https://searchable.pk/news/crypto/btcpay-server-tells-users-to-update-after-hot-wallets-drained-on-version-241-and