KuCoin is a trusted crypto exchange to buy, sell, and trade Bitcoin, Ethereum, and 1000+ altcoins—powering secure access to the Web3 economy.

Crypto Exchange | Bitcoin Exchange | Bitcoin Trading | KuCoin

<p>BTCPay security advisory update:

- Targeted versions: 2.4.1 (July 2026) and older
- Attack vector: automated sweeps on unpatched instances
- Advice: keep your server updated

The fundamental flaw is storing spend keys on self-hosted merchant servers. Expecting e-commerce merchants to act as 24/7 DevOps engineers, patching security releases within weeks, is broken architecture. If a vulnerable VPS empties a hot wallet, the vulnerability isn't just the code version—it's the decision to store signing keys on the server.

Still recommending https://t.co/vAXqJ9KlFF for normal merchants if you don’t have a full-time op running it.</p>

BTCPay security advisory update:
- Targeted versions: 2.4.1 (July 2026) and older
- Attack vector: automated sweeps on unpatched instances
- Advice: keep your server updated
The fundamental flaw is storing spend keys on self-hosted merchant servers. Expecting e-commerce merchants to act as 24/7 DevOps engineers, patching security releases within weeks, is broken architecture. If a vulnerable VPS empties a hot wallet, the vulnerability isn't just the code version—it's the decision to store signin

BTCPay security advisory update: - Targeted versions: 2.4.1 (July 2026) and older - Attack vector: automated sweeps on unpatched instances - Advice: keep your server updated The fundamental flaw is storing spend keys on self-hosted merchant servers. Expecting e-commerce merchants to act as 24/7 DevOps engineers, patching security releases within weeks, is broken architecture. If a vulnerable VPS empties a hot wallet, the vulnerability isn't just the code version—it's the decision to store signing keys on the server. Still recommending https://t.co/vAXqJ9KlFF for normal merchants if you don’t have a full-time op running it.

Comment