BTCPay Server warns of critical vulnerability, urges immediate update

BTCPay Server has issued an urgent security alert after discovering a critical vulnerability under active exploitation that could allow attackers to steal funds.

There is a critical vulnerability being actively exploited on BTCPay Server, which can result in the loss of funds.

Please update your BTCPayServer to 2.4.2 by going to Admin Dashboard -> Server -> Maintenance -> Update & verify the 2.4.2 version string in the footer.

If you…

— BTCPay Server (@BtcpayServer) August 7, 2026

The project instructed users to update to version 2.4.2 as soon as possible and confirm that the installation was successful. For those unable to apply the update immediately, BTCPay recommended taking servers offline until the patch could be installed.

Disclosure: This article was edited by Editorial Team. For more information on how we create and review content, see our Editorial Policy.