YFarmX logoYFarmX

Tools Crypto Exploit Tracker exploit-0177

Exploit record

BTCPay discloses a hot-wallet flaw fixed in August

Attack vector
Software Vulnerability
Chain
Bitcoin / Litecoin
Sector
Payments

What happened

BTCPay Server disclosed attacks involving hot wallets on versions 2.4.1 and earlier on 1 November. Version 2.4.2 fixed the flaw on 7 August.

The total stolen remains unconfirmed. A destination wallet’s complete transaction history includes activity outside this incident and cannot serve as its loss total.

Sources

One record from the Crypto Exploit Tracker, maintained by the Security Desk.Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 9 November 2026