Bitcoin Forum
November 02, 2026, 09:51:43 PM *
News: Latest Bitcoin Core release: 32.1 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: There are reports of unauthorized Attackers Drain BTCPay Server Hot Wallets  (Read 110 times)
fullfitlarry (OP)
Sr. Member
****
Offline

Activity: 532
Merit: 392


You Attract What You Are


View Profile
Today at 01:23:02 AM
 #1



https://x.com/BtcpayServer/status/2117020340815819262

As advise by Btcpay Server, if you are running a instance, shut it down immediately as they further investigates the report.

Another day, another exploit.  Sad

goldkingcoiner
Legendary
*
Offline

Activity: 2954
Merit: 3144


HoDL


View Profile WWW
Today at 01:29:03 AM
Merited by SamReomo (1)
 #2

The more advanced AI becomes, the more attacks on legacy systems we will see happen. And those people who are not using AI to update and upgrade their security are the ones at fault here. How do they expect to go toe to toe with current AI technology? Do they really believe that their human written code has no exploitable parts? Or do they just arrogantly assume it is safe?

Way too many service providers are too comfortable with being too greedy to AI-proof their systems. We need some legislation or some kind of mandatory new special AI insurance for these companies. They do not really seem to care about their customers otherwise.

SamReomo
Legendary
*
Offline

Activity: 1708
Merit: 1002


BitList.co - The directory of genuine services


View Profile WWW
Today at 01:49:18 AM
 #3



https://x.com/BtcpayServer/status/2117020340815819262

As advise by Btcpay Server, if you are running a instance, shut it down immediately as they further investigates the report.

Another day, another exploit.  Sad
As @goldkingcoiner said the AI is getting advanced each day and such advancement is going to create hacking related problems for many platforms. In past it wasn't easy for hackers to find many bugs but now with the help of advanced AI agents they can find bugs that have been there for decades.

I think now no platform is safe against the advanced AI because they are much smarter and more intelligent than humans and they can do more harm than what we can even think right now. In recent few weeks we have seen many top platforms with highest security levels getting hacked so anything can be done with the AI models nowadays until a good and permanent solution is created to fix all bugs so AI models can't find such bugs.

▄▄████████████████████▄▄
▄████████████████████████▄
██████████████████████████
██████████████████████████
███▄▄▀▀▀▄▀▀▄█▄▀▀▀▄█▄▀▀▄▄██
████████████▐▌████▐▌██████
███▀███████▀▀████▀▀███████
███▐▌█████████████████████
████▀▄▄██▄▄▄▄███▄▄▄███████
██████▀▀▀█▀▀▀▀█▀▀▀▀▀██████
██████████████████████████

▀████████████████████████▀
▀▀████████████████████▀▀

..1win..
█████████████████████████
█████████████████████████
████████████▀░░░▀▀▀▀█████
█████████▀▀▀█▄░░░░░░░████
████▀▀░░░░░░░█▄░▄░░░▐████
████▌░░░░▄░░░▐████░░▐████
█████░░░▄██▄░░██▀░░░█████
█████▌░░▀██▀░░▐▌░░░▐█████
██████░░░░▀░░░░█░░░▐█████
██████▌░░░░░░░░▐█▄▄██████
███████▄░░▄▄▄████████████
█████████████████████████
█████████████████████████

..POKER..
█████████████████████████
█████████████████████████
███████████▀▀▀███████████
███████▀▀░░▄▄▄░░▀▀███████
██████▄░░░░███░░░░▄██████
█████░▀▀█▄▄░░░▄▄█▀▀░█████
█████░██░░▀▀█▀▀░░██░█████
█████░░░░░░░█░██░▄▄░█████
█████▄░░░▄▄░█░▄▄░▀▀▄█████
███████▄▄▀▀░█░▀▀▄▄███████
███████████▄█▄███████████
█████████████████████████
█████████████████████████

..GAMES..
█████████████████████████
█████████████████████████
████████▀▀░░░░░▀▀████████
██████░░▄██▄░▄██▄░░██████
█████░░████▀░▀████░░█████
████░░░░▀▀░░░░░▀▀░░░░████
████░░▄██░░░░░░░██▄░░████
████░░████░░░░░████░░████
█████░░▀▀░▄███▄░▀▀░░█████
██████░░░░▀███▀░░░░██████
████████▄▄░░░░░▄▄████████
█████████████████████████
█████████████████████████
mirakal
Legendary
*
Offline

Activity: 4032
Merit: 1330



View Profile
Today at 01:19:00 PM
 #4

According to the report, approximately $1.63 million worth of cryptocurrency was stolen, including 18.38 BTC and 3,405 LTC.
You can read the full report here Bitquery's investigation.

Looks like hacking incidents have been happening consistently recently, Binance just recovered and now this one.

So if big exchanges with stronger security can still get hacked, how much more vulnerable are smaller services like payment processors?

 
  jet LA  
█████
██
██
██
██
██
██
██
██
██
██
██
█████
██████████
██
☘︎
██
██████████
███████████████████████████████████████████████████████████████████████████████████████████████████
 
 A crypto casino LOL 
 
███████████████████████████████████████████████████████████████████████████████████████████████████
██████████
██
⚽︎
██
██████████
█████
██
██
██
██
██
██
██
██
██
██
██
█████
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
 
   Play Now   
Wincob
Member
**
Offline

Activity: 69
Merit: 22


View Profile
Today at 02:33:41 PM
 #5

Is it the North Korea again? Since the beginning of this hack how many people have been arrested so far? None, and how many AI has been shut down due to been the priority tool that hackers are using?

Everything keeps looking like a big plan to drain the crypto market before real regulation comes, they have found what to put the blame on so even if the FBI are the ones robbing everyone no one is going to find any truth.

Trump stole billions when he came into power and now it's left for the dogs to steal everything they can, haven't not seen Trump coming out to address this hack issue and he was all over crypto in 2024 and 2025, what happened?  Something is fishy I can tell.
ryzaadit
Legendary
*
Offline

Activity: 3374
Merit: 1624



View Profile WWW
Today at 02:51:01 PM
 #6

Is it the North Korea again?
No, it can be anyone. Expect a breach until everyone updates their code/platform with a pre/post code AI. Also, we have a PHP zero-day issue, and more breaches are coming to every platform.

how many AI has been shut down due to been the priority tool that hackers are using?
OpenAI in July turned off some experimental AI model due to its AI model make hacking/breach to server on Hugging Face.
Source: https://edition.cnn.com/2026/07/29/tech/openai-hugging-face-cyberattack

Ruttoshi
Hero Member
*****
Offline

Activity: 1232
Merit: 848


www.Crypto.Games: Multiple coins, multiple games


View Profile
Today at 03:06:37 PM
 #7

I think these legacy system should start searching for bugs in their system with AI in order for them to know if their system has any bug that will make it vulnerable to hackers because that's what these hackers are usin AI to check first before exploiting their system due to the bug.

AI is getting sophisticated and since, it's helping these hackers, it can also help these legacy systems to tighten their security when a bug is found by updating and upgrading their system. AI should be used to fight AI.

█████████████████████████
███████▄▄▀▀███▀▀▄▄███████
█████▄▀███▄███▄███▀▄█████
█████▄█▄█▀▀███▀▀█▄█▄█████
████▀▀██▀███▀███▀██▀▀████
█████▄█████████████▄█████
████████▀███████▀████████
█████▀█████████████▀█████
████▄▄██▄██▄█▄██▄██▄▄████
█████▀█▀███▀▄████▀█▀█████
█████▀▄███▀███▀███▄▀█████
███████▀▀▄▄███▄▄▀▀███████
█████████████████████████
.
 CRYPTOGAMES 
.
 Catch the winning spirit! 
│█▄░▀███▌░▄
███▄░▀█░▐██▄
▀▀▀▀▀░░░▀▀▀▀▀
████▌░▐█████▀
████░░█████
███▌░▐███▀
███░░███
██▌░▐█▀
PROGRESSIVE
      JACKPOT      
│██░░▄▄
▀▀░░████▄
▄▄▄▄██▀░░▄▄
░░░▀▀█░░▀██▄
███▄░░▀▄░█▀▀
█████░░█░░▄▄█
█████░░██████
█████░░█░░▀▀█
LOW HOUSE
         EDGE         
│██▄
███░░░░░░░▄▄
█▀░░░░░░░████
█▄░░░░░░░░█▀
██▄░░░░░░▄█
███▄▄░░▄██▌
██████████
█████████▌
PREMIUM VIP
 MEMBERSHIP 
│
DICE   ROULETTE   BLACKJACK   KENO   MINESWEEPER   VIDEO POKER   PLINKO   SLOT   LOTTERY
Orpichukwu
Hero Member
*****
Offline

Activity: 1386
Merit: 601


Leading Crypto Sports Betting & Casino Platform


View Profile
Today at 03:20:26 PM
 #8

How many more exchanges are going to be hacked before developers will learn from their platform mistake and update their code, or will they still consider it unnecessary until it gets to their turn? How much will it cost them to deploy an advanced AI which can help identify and point out possible threats on the system? It actually looks like those developers care less about their customers, like Goldkingconer pointed out above.

██████████████████████████████████████████████████████████████
████████████
▀▀███████▀████████████████████████████████████████
██████████
▀██▄▄████▄██▐████▀▀███████████▀▀████████████████████
█████████
▌██▐██████▌██████▌█▐█████████████▐███████████████████
█████████
▌█████████▄▄▄██████▀▀▀▀███████▌█████▀████████████████
██████████
▄███▀███████▀▀██████▄██████████▐█▀█▄███▀▀███████████
████████████
▄▄███▀▀██▄▄▄▄██▐███▀██▄█▐█▌██▀█▄██▀██▄▄███████████
████████████████
▄▄███▀██▌███████▄█▌███████▐██▌███▀█▄██████████
██████████
▀███▄███████████▐██▌█▐████████▐██▐████▄██▀██████████
█████████
▌██▄███████████▄████▄████▄██▄██████▀▄█████▄▀█████████
█████████
▌██▀███▀▀███▄█████████████████████▄██▀▀▀▀▀█▄█████████
██████████
▄██████▄▄██████████████████████████▄▄▄▄▄▄███████████
██████████████████████████████████████████████████████████████
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██

 🎰  🎲 ..Play Smarter.. 🏀  ⚽ ..Play Now..
uchegod-21
Hero Member
*****
Offline

Activity: 1848
Merit: 756


Are we ever seeing $126k again?


View Profile
Today at 05:04:44 PM
 #9

I think these legacy system should start searching for bugs in their system with AI in order for them to know if their system has any bug that will make it vulnerable to hackers because that's what these hackers are usin AI to check first before exploiting their system due to the bug.

AI is getting sophisticated and since, it's helping these hackers, it can also help these legacy systems to tighten their security when a bug is found by updating and upgrading their system. AI should be used to fight AI.
Yea you are right. Hackers are being smart and  It is just unfortunate that hackers turned out to be be this smart to think of using AI to discover vulnerabilities and steal. Now that developers have realised what the hackers are doing, they do not have to wait till they are also victims first before they can fix the vulnerabilities. Yea, fix the vulnerabilities before the hackers discover them first.

With all of this happening, no one should take any security concern for granted. Like AI, quantum computing and any other threat.

██████████████████████████████████████████████████████████████████████████
███▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄█
██████████████▄▄██████████████████████████████████████████████████████████
█████████████████▄████████████████████████████████████████████████████████
█████████▀▀▀▀███████████▄▄▄▄▄████████▄▄▄▄▄▄██▄▄▄▄▄▄▄▄▄▄▄██████████████████
█████████████▐███████▄█████████▄███▄██████████████████████████████████████
█████████▄▄▄▄█████▀█████████████████████▀▀▀███████████████████████████████
█████████████████▀██████████████████████████████▀███▀█████████████████████
████████████████▄███████████████▀███████████████▄███▄█████████████████████
███████████▀████████▀████▄▄▄▄▄▄▄██████████████████████████████████████████
████████████▀████████▀████████████████████████████████████████████████████
███▀▀▀▀▀▀██████▀▀▀▀█████▀▀▀▀▀▀▀▀███▀▀▀▀▀█████▄▄▄▄▄▄▄▄▄▄▄███▀▀▀▀▀██▀▀▀▀▀███
██████████████████████████████████████████████████████████████████████████

..WAGER ON  ❼ SLOTS  ⚂ ORIGINALS  ♣ POKER  TO GAIN  $REROLL..


..JOIN NOW..
Aanuoluwatofunmi
Hero Member
*****
Offline

Activity: 1498
Merit: 506



View Profile
Today at 05:08:06 PM
 #10



https://x.com/BtcpayServer/status/2117020340815819262

As advise by Btcpay Server, if you are running a instance, shut it down immediately as they further investigates the report.

Another day, another exploit.  Sad

As for the use of AI for any developmental upgrade upon any system, I wouldn't blame them because it is an advancement we expect to see that things are getting more impressive with using AI, but also come to think of it in this way, using a centralized platform is already known to be of risk itself, how much much when will expose it more to the vulnerability of using AI with some sophisticated apps or links that we don't even know their genuine source code, we have to be more careful and always embrace decentralization instead of centralization if we really care about our safety.

 
  jet LA  
█████
██
██
██
██
██
██
██
██
██
██
██
█████
██████████
██
☘︎
██
██████████
███████████████████████████████████████████████████████████████████████████████████████████████████
 
 A crypto casino LOL 
 
███████████████████████████████████████████████████████████████████████████████████████████████████
██████████
██
⚽︎
██
██████████
█████
██
██
██
██
██
██
██
██
██
██
██
█████
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
 
   Play Now   
Mrbluntzy
Sr. Member
****
Offline

Activity: 994
Merit: 281


Love for one another is golden, 🏆❤


View Profile WWW
Today at 05:24:05 PM
 #11

The more advanced AI becomes, the more attacks on legacy systems we will see happen. And those people who are not using AI to update and upgrade their security are the ones at fault here. How do they expect to go toe to toe with current AI technology? Do they really believe that their human written code has no exploitable parts? Or do they just arrogantly assume it is safe?
I guess they are not yet done testing AI ability to trust it more than their human writen codes. That could be why they are not using AI yet, It's just a guess. I also wonder why they can not use the AI that hackers, I don't mean to use it to write their code but at least use it to check for vulnerability and fix it before hacker become the first people to discover it. But if my guess is also correct, time will come when they will use their own developed AI to fight against the ones that the hackers are using.

█████
██
██
██
██
██
██
██
██
██
██
██
█████
█████████████████████████████████████████████████████
jet LA
█████████████████████████████████████████████████████
█████
██
██
██
██
██
██
██
██
██
██
██
█████
█████
██
██
██
██
██
██
██
██
██
██
██
█████
██████████
██
☘︎
██
██████████
███████████████████████████████████████████████████████████████████████████████████████████████████
 
 A crypto casino LOL 
 
███████████████████████████████████████████████████████████████████████████████████████████████████
██████████
██
⚽︎
██
██████████
█████
██
██
██
██
██
██
██
██
██
██
██
█████
██
██
██
██
██
██
██
██
██
██
██
██
██
█████
██
██
██
██
██
██
██
██
██
██
██
█████
█████████████████████████████████████████████
 
 Play Now 
 
█████████████████████████████████████████████
█████
██
██
██
██
██
██
██
██
██
██
██
█████
o48o
Legendary
*
Offline

Activity: 3766
Merit: 1310


Leading Crypto Sports Betting & Casino Platform


View Profile
Today at 05:42:20 PM
 #12

The more advanced AI becomes, the more attacks on legacy systems we will see happen. And those people who are not using AI to update and upgrade their security are the ones at fault here. How do they expect to go toe to toe with current AI technology? Do they really believe that their human written code has no exploitable parts? Or do they just arrogantly assume it is safe?

Way too many service providers are too comfortable with being too greedy to AI-proof their systems. We need some legislation or some kind of mandatory new special AI insurance for these companies. They do not really seem to care about their customers otherwise.
Humans haven't written a line of code for years now, they are just in there to double check it. Even best penetration stress test for it is done with AI.
And no one is assuming anything has ever been "safe". Just windows alone comes with new security patches all the time, and we can only hope someone wasn't fast enough to exploit them before they got patched. Exploits exist and everyone who knows tech knows it, most of them haven't just been found yet.

But by all means, offer an alternative to this. I believe that some sort of AI insurances already exist, but we can't just put words together and pretend it's a thing we can demand. So much has changed in short time, so who is supposed give these new AI insurances and with what terms? Those terms and threats can change in a day.

██████████████████████████████████████████████████████████████
████████████
▀▀███████▀████████████████████████████████████████
██████████
▀██▄▄████▄██▐████▀▀███████████▀▀████████████████████
█████████
▌██▐██████▌██████▌█▐█████████████▐███████████████████
█████████
▌█████████▄▄▄██████▀▀▀▀███████▌█████▀████████████████
██████████
▄███▀███████▀▀██████▄██████████▐█▀█▄███▀▀███████████
████████████
▄▄███▀▀██▄▄▄▄██▐███▀██▄█▐█▌██▀█▄██▀██▄▄███████████
████████████████
▄▄███▀██▌███████▄█▌███████▐██▌███▀█▄██████████
██████████
▀███▄███████████▐██▌█▐████████▐██▐████▄██▀██████████
█████████
▌██▄███████████▄████▄████▄██▄██████▀▄█████▄▀█████████
█████████
▌██▀███▀▀███▄█████████████████████▄██▀▀▀▀▀█▄█████████
██████████
▄██████▄▄██████████████████████████▄▄▄▄▄▄███████████
██████████████████████████████████████████████████████████████
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██
██

 🎰  🎲 ..Play Smarter.. 🏀  ⚽ ..Play Now..
Antidote47k
Full Member
***
Offline

Activity: 154
Merit: 144


Spinly.io - Next-gen Crypto iGaming Platform


View Profile
Today at 06:21:22 PM
 #13

I think these legacy system should start searching for bugs in their system with AI in order for them to know if their system has any bug that will make it vulnerable to hackers because that's what these hackers are usin AI to check first before exploiting their system due to the bug.

AI is getting sophisticated and since, it's helping these hackers, it can also help these legacy systems to tighten their security when a bug is found by updating and upgrading their system. AI should be used to fight AI.
Exactly, he who fails to prepare, prepares to fail. What I would like to add is that using AI to find vulnerabilities is just one part, they also have fix the vulnerabilities and release the patch or security update, followed by users install the patches and security fixes, cause a security patch only protects installations on which it has been applied. As in this case the attack affected the versions on 2.4.1, project said they haven’t received any credible report of hot wallets drains from users running 2.4.7.

You can say this is one of the responsibility that comes with self hosting. You gain control over your infrastructure, at the same time, you are responsible for maintaining it

Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!