BlockBeats News, August 8th

Recently, the Bitcoin payment processing project BTCPay Server issued a warning to users that its server has a critical vulnerability under active attack, allowing attackers to gain unauthorized access and potentially lead to fund loss.

BTCPay Server posted an announcement on social platform X, urging administrators to upgrade to version 2.4.2 immediately and verify that the server footer shows the update completion. For those unable to upgrade promptly, the official recommendation is to temporarily shut down the BTCPay Server to prevent further attacks.

Furthermore, BTCPay Server advised users to rotate possibly exposed macaroon credentials, recreate the macaroons.db file, and refresh authentication strings for other Lightning Network backends.

The official reminder stated that if users have created a hot on-chain wallet in BTCPay Server, they should promptly move the funds out and recreate the wallet.

Currently, BTCPay Server has not disclosed the specific details of the vulnerability, the start time of the attack, the number of affected servers, or whether any funds have been stolen. The vulnerability was reported by a member of the Bitcoin Red Team.

At the time of this incident, AI-assisted vulnerability discovery has drawn attention in the crypto industry. In recent security events in various crypto projects, researchers and companies have all pointed out that AI tools are increasing the speed of discovering code vulnerabilities, which could also be utilized by attackers for automated identification of security flaws.