BTCPay Server warns users of a critical vulnerability being actively exploited, urging immediate updates or server deactivation.
Summary
- BTCPay Server is alerting users about an ongoing exploitation of a critical security vulnerability.
- Immediate updates or server deactivation are recommended for users.
- There is no confirmation regarding the role of AI in these attacks from BTCPay Server.
BTCPay Server has issued a critical warning to its users about a serious security vulnerability that is currently being exploited by attackers, potentially leading to theft of funds.
In a recent post on X, the Bitcoin payment processing platform urged server administrators to upgrade to version 2.4.2 and to check the server footer to confirm the update.
“If you cannot update immediately, please disable your BTCPay Server to prevent unauthorized access until you can perform the update,” the organization advised.
Users are also instructed to change their macaroon credentials, recreate the macaroons.db file, and refresh authentication strings for other Lightning Network backends. Additionally, those who have created a hot on-chain wallet within BTCPay are advised to transfer their funds and set up a new wallet.
This vulnerability was brought to light by the Bitcoin Red Team, and BTCPay Server has expressed its gratitude towards them. However, the organization has not disclosed specifics about the vulnerability's mechanics, the timing of the attacks, how many servers are affected, or whether any funds have been stolen.
Although BTCPay Server has not confirmed any AI involvement in these attacks, the warning comes amid growing concerns about AI's increasing role in identifying vulnerabilities in cryptocurrency systems. For instance, in May, a security researcher utilized AI to uncover a significant flaw in Zcash that could have allowed the creation of unlimited counterfeit ZEC. Similarly, Coinkite suggested that AI might have been used in exploiting a firmware flaw that led to over $100 million in Bitcoin theft.
Recently, Boltz, a Bitcoin swap provider, suspended its operations after several exploits, indicating that AI-assisted attacks were revealing vulnerabilities faster than they could be addressed.
BTCPay Server has not yet responded to inquiries for further comments.
