Zero announcement / advisory notice / blog post or any indication of the vulnerability on BTCPay Server's website other than the post on X.
It has been 4 hours.
If this is how they operate, I advise you all to just pull the plug and shut your BTCPay instances down.
npub1y3…gvp4j
2026-08-07 20:47:53 UTC
Author Public Key
npub1y3k2nheva29y9ej8a22e07epuxrn04rvgy28wvs54y57j7vsxxuq0gvp4jPublished at
2026-08-07 20:47:53 UTCEvent JSON
{
"id": "379ea5164e10b1c86869e00bc611396479c1a999a2a737cb406c6680cf6ac06f",
"pubkey": "246ca9df2cea8a42e647ea9597fb21e18737d46c4114773214a929e9799031b8",
"created_at": 1786135673,
"kind": 1,
"tags": [
[
"client",
"Ditto",
"31990:781a1527055f74c1f70230f10384609b34548f8ab6a0a6caa74025827f9fdae5:ditto"
]
],
"content": "Zero announcement / advisory notice / blog post or any indication of the vulnerability on BTCPay Server's website other than the post on X.\n\nIt has been 4 hours.\n\nIf this is how they operate, I advise you all to just pull the plug and shut your BTCPay instances down.",
"sig": "6484bbb0a4b0cda319c0626747241eb9ed0e1c6e8c6018d92c3cfdf1e5e328aa6fbef797ac0bb5ee7a5d86b8c6e25b3158cb13bf6caf73923425d4a22cb48018"
}