[BTCPay Server: Attack Path Targeting Versions 2.4.1 and Earlier Discovered] BTCPay Server announced on its X platform that its incident response investigation has uncovered an attack path targeting instances running version 2.4.1 (released July 23, 2026) and earlier. Currently, there are no credible reports of users running the latest version 2.4.7 experiencing hot wallet fund theft. The official team again urges users to update their software promptly and requests affected users to submit incident details and logs to their security team. Previously, BTCPay Server stated that hot wallets on multiple instances were emptied by attackers.