BTCPay Server Urges Operators to Shut Down Instances Amid Hot-Wallet Reports

Simon Yoon

1 min read

BTCPay Server Urges Operators to Shut Down Instances Amid Hot-Wallet Reports

Operators were told to run `./btcpay-down.sh`. The team is investigating, but the incident’s cause and scope are unknown.

By Simon Yoon

Published Nov 1, 2026, 5:41 PM EST

A hand powers down a compact server appliance / TokenPost.ai

BTCPay Server urged operators to shut down their instances as its team investigates reports that attackers moved funds from a hot wallet. The cause and scope of the incident were not yet known.

The recommended command is ./btcpay-down.sh. BTCPay Server said it had received reports of the transfers and was investigating the incident.

Simon Yoon

Reporter

Simon Yoon reports on blockchain technology for TokenPost. Send corrections or tips to info@tokenpost.com.