By Isaac • August 7, 2026 4:03 pm •
A security warning from BTCPay Server is demanding immediate attention from merchants who use the software to accept bitcoin.
The project says attackers are actively exploiting a critical vulnerability that can lead to lost funds.
Trending: Trump-supporting Miss North Carolina USA STRIPPED of title over problematic posts
The emergency fix is version 2.4.2.
What makes this flaw especially dangerous is the protection it managed to evade.
An affected account could require a time-based one-time password, the familiar six-digit code generated by an authenticator app, and still leave a separate door open through BTCPay Server’s Greenfield API.
The authenticator code itself was not cracked.
The vulnerable login path simply failed to demand it.
There is a critical vulnerability being actively exploited on BTCPay Server, which can result in
Continue reading
Join the conversation!
Please share your thoughts about this article below. We value your opinions, and would love to see you add to the discussion!