BTCPay Founder Says Public Version 2.4.7 Was Not Attacked

BTCPay Server founder Nicolas Dorier said public servers running version 2.4.7 were not attacked in the hot-wallet incident, while vulnerabilities in older releases remain under investigation.

Dorier’s statement applies to public servers on version 2.4.7; it does not cover every installation of the software. Earlier versions remain part of a vulnerability review tied to the same incident. The distinction keeps his assurance specific to the systems and release he identified.

The incident involves a hot wallet, and the investigation concerns vulnerabilities in older versions.

For now, the disclosed version status is narrow: Dorier said public 2.4.7 servers were not attacked, while older releases remain under examination. Older vulnerabilities remain under investigation.