BTCPay Server urged operators running payment software version 2.4.1 or earlier, released on July 23, 2026, to shut down or update their servers following reports of unauthorized attackers draining funds from user hot wallets.