BTCPay Server 2.4.7 Security Release Adds Urgency for Self-Hosted Merchants

TL;DR: BTCPay Server’s 2.4.7 release published in late October includes security fixes following a broad review of reported issues. Disclosure of a serious issue is not proof that it has been exploited in the wild. The appeal of self-hosting is genuine control over funds and infrastructure. The hidden cost is that responsibility cannot be outsourced to a hosted provider’s security team. For small merchants, having a routine patch window and recovery procedure can be more valuable than sophisticated features they never have time to maintain. What the primary source establishes BTCPay Server’s 2.4.7 release published in late October includes security fixes following a broad review of reported issues. The project’s release materials describe findings across several severities. That makes the update relevant to businesses operating their own Bitcoin payment servers, particularly hosts that manage multiple merchants or expose administrative functions to the internet. The dated original disclosure is the starting point for the figures and product scope discussed here. A self-hosted payment processor reduces dependence on an intermediary, but it does not remove the responsibilities of sof...