Every day is a zero-day! Bitcoin payment infrastructure BTCPay suffers another hack, official response: Shut down servers! Holy crap, the aftermath of Binance's $6 billion heist hasn't even subsided, and now the Bitcoin payment ecosystem is in trouble again! This time it's the open-source payment processor BTCPay Server's turn. The official team suddenly issued an emergency alert: reports of hot wallets being emptied by hackers have been received, requiring all users running instances to immediately execute `./btcpay-down.sh` to shut down the servers until the investigation is complete. BTCPay is a crucial self-custodied payment infrastructure in the Bitcoin ecosystem, supporting on-chain and Lightning Network payments, eliminating the need for merchants to entrust funds to third parties. Companies like Namecheap have used it, and a single server instance can even serve hundreds of merchants. The biggest problem now is that the official team hasn't confirmed which versions were compromised, how many instances were compromised, or the total amount of money lost. This is the second major security incident BTCPay has suffered in three months. In August, attackers exploited a vulnerability to steal LND management credentials, leading to the theft of funds from some Lightning Network nodes. On October 29th, BBTCPay released its 2.4.7 security update, fixing a number of security issues, including critical vulnerabilities. However, just a few days later, on November 1st, reports surfaced that hot wallets had been emptied. It's currently unclear whether the two attacks are related. Every day is a zero-day; security is quickly falling behind the speed of attacks.