BTCPay Server Urges Operators to Take Servers Offline Amid Hot Wallet Drain Reports
Key Takeaways
- •BTCPay Server instructed operators to bring their servers offline on 2 November 2026 after multiple deployments reported unauthorized fund outflows.
- •The affected funds were held in hot wallets, the internet-connected wallets that BTCPay Server instances use to settle incoming payments automatically, and the incidents spanned several servers rather than one deployment.
- •BTCPay Server is a free, open-source, self-hosted payment processor that allows merchants to accept Bitcoin on-chain and over the Lightning Network while retaining custody of their own private keys.
- •Since no exchange or payment provider intermediates a self-hosted setup, responsibility for securing funds against a compromised server rests entirely with the operator.
- •Hot wallets enable automatic settlement of incoming orders but carry greater exposure than offline cold storage, which is commonly recommended for holdings not required for day-to-day payment processing.
BTCPay Server Urges Operators to Take Servers Offline Amid Hot Wallet Drain Reports
BTCPay Server, the open-source software that merchants run on their own hardware to accept Bitcoin payments, told operators on 2 November to take their servers offline after reports that funds held in hot wallets had been taken without authorization across multiple servers.
The advisory, issued by the project team on 2 November 2026, followed reports from operators of unauthorized outflows from hot wallets — the internet-connected wallets that BTCPay Server instances use to process incoming payments automatically. According to the reports, the incidents were not confined to a single deployment but affected multiple servers.
BTCPay Server is a free and open-source, self-hosted payment processor that enables merchants to accept Bitcoin without relying on third-party intermediaries. Because the software runs on infrastructure controlled by the operator, private keys remain in the merchant's own custody rather than with an exchange or payment provider. The platform supports both on-chain Bitcoin transactions and payments over the Lightning Network.
Hot wallets within a BTCPay Server setup are intentionally kept connected to the internet so that incoming orders can be settled automatically. That design offers operational convenience, but it carries greater exposure than offline cold storage, which is commonly recommended for holdings not required for day-to-day payment processing.
In response to the reports, the team urged anyone running an instance to take their server offline — an instruction that highlights the trade-off built into self-hosted payments. Because the software runs on the merchant's own hardware and the private keys remain in the operator's custody, there is no exchange or payment provider whose systems sit between a merchant's funds and a compromised server; responsibility for securing those funds rests with the operator.
This content was first published on COINOTAG: https://en.coinotag.com/btcpay-server-hot-wallet-drains-shutdown
