BTCPay Urges Merchants to Shut Servers After Hot Wallet Attacks

The significance here is less the bug itself than the response pattern: an emergency patch followed days later by a shutdown advisory suggests the fix did not fully close the exposure for merchants on older versions. This lands squarely on self-hosted merchants who run their own payment infrastructure precisely to avoid custodial risk, and who now face downtime as the safer option. Whether the attacks are contained to the flagged versions, and how quickly operators migrate off 2.4.1 and older, is the open question worth tracking.