---
title: "BTCPay urges users to shut down servers after reports of drained wallets"
description: "CoinDesk reported that BTCPay, an open-source bitcoin payment tool, told users to switch off their servers after reports of drained wallets. The project said…"
language: en
canonical: "https://whycoinmoves.com/en/events/bitcoin-btcpay-bitcoin-payment-tool-tells-83271918f1e84a"
published: 2026-11-02T04:46:57.000Z
updated: 2026-11-02T05:47:01.000Z
indexable: true
---

# BTCPay urges users to shut down servers after reports of drained wallets

CoinDesk reported that BTCPay, an open-source bitcoin payment tool, told users to switch off their servers after reports of drained wallets. The project said…

Attributed sources: [CoinDesk](<https://www.coindesk.com/tech/2026/11/02/btcpay-a-bitcoin-payment-tool-tells-users-to-switch-off-their-servers-after-reports-of-drained-wallets>)

## Key facts

CoinDesk reported that BTCPay, an open-source bitcoin payment tool, told users to switch off their servers after reports of drained wallets. The project said it is still investigating and has not given a loss figure or announced a fix, while its founder said the reports appear to involve versions older than 2.4.2.
Evidence strength: Single source, 1 publisher group(s) (CoinDesk).
After site detection, observed returns were 5 minutes: -0.06% (Nov 2, 2026, 04:46 → Nov 2, 2026, 04:51, UTC; Gate · USDT); 1 hour: -0.08% (Nov 2, 2026, 04:46 → Nov 2, 2026, 05:46, UTC; Gate · USDT)
In the preceding 30 days, the 99th percentile of absolute hourly returns was 1.23% (OKX · USDT; cutoff Nov 2, 2026, 04:46, UTC).

## Returns after site detection

| Window | Return | BTC | Difference from BTC | Actual sampled interval (UTC) | Source |
| --- | --- | --- | --- | --- | --- |
| 5 minutes | -0.06% | -0.06% | 0.00 pts | Nov 2, 2026, 04:46 → Nov 2, 2026, 04:51 | Gate · USDT |
| 1 hour | -0.08% | -0.08% | 0.00 pts | Nov 2, 2026, 04:46 → Nov 2, 2026, 05:46 | Gate · USDT |

## Historical hourly baseline

| Metric | Value |
| --- | --- |
| Coverage | 100.0% (720/720) |
| Median absolute hourly return | 0.14% |
| 99th percentile of absolute hourly returns | 1.23% |
| BTC beta | 1.00 |
| Source / cutoff (UTC) | OKX · USDT / Nov 2, 2026, 04:46 |

## Claims and open questions

- CoinDesk reported that BTCPay, an open-source bitcoin payment tool, told users to switch off their servers after reports of drained wallets.
- According to CoinDesk, the project said it is still investigating and has not given a loss figure or announced a fix.
- CoinDesk reported that the project's founder said the reports appear to involve versions older than 2.4.2.
- Which specific versions of BTCPay are affected and whether newer releases such as 2.4.2 are confirmed safe, which an official project advisory would clarify.
- The amount of bitcoin or other funds lost in the drained wallets, which the project has not disclosed and on-chain data or an official statement would confirm.

## Source evidence

- [BTCPay, a bitcoin payment tool, tells users to switch off their servers after reports of drained wallets](<https://www.coindesk.com/tech/2026/11/02/btcpay-a-bitcoin-payment-tool-tells-users-to-switch-off-their-servers-after-reports-of-drained-wallets>) — CoinDesk; published Nov 2, 2026, 04:41; received Nov 2, 2026, 04:46 (UTC).


## Recent BTC events and market reactions

- [Strangers send sub-dollar payments to Binance hacker wallets with messages](<https://whycoinmoves.com/en/events/bitcoin-strangers-are-begging-binance-hacker-1517cb068e9a36>) — Published Nov 2, 2026, 05:18 (UTC) · Single source (1 publisher) · Security · 5m +0.13% / 1h -0.02%
- [Bitcoin recovers toward $79,000 as markets absorb crypto's largest hack](<https://whycoinmoves.com/en/events/bitcoin-bitcoin-claws-back-toward-79-a196c5706ca8d0>) — Published Nov 2, 2026, 04:42 (UTC) · Single source (1 publisher) · Security · 5m +0.02% / 1h -0.07%
- [US spot bitcoin ETFs see $643 million outflow after Binance hack](<https://whycoinmoves.com/en/events/bitcoin-bitcoin-etf-investors-head-exits-d91cf427f988df>) — Published Nov 1, 2026, 16:01 (UTC) · Multiple publishers (3 publishers) · Security · 5m +0.01% / 1h +0.16%
- [Binance begins phased crypto withdrawals, starting with bitcoin, after $6.3 billion hack](<https://whycoinmoves.com/en/events/bitcoin-binance-opens-crypto-withdrawals-phases-1c16d45c22e9eb>) — Published Nov 1, 2026, 10:35 (UTC) · Single source (1 publisher) · Security · 5m -0.02% / 1h -0.16%
- [Strive CEO says Binance hack hasn't changed his long-term Bitcoin case](<https://whycoinmoves.com/en/events/bitcoin-bitcoin-held-up-better-than-6aabe300a10cf2>) — Published Oct 31, 2026, 15:26 (UTC) · Single source (1 publisher) · Security · 5m +0.09% / 1h +0.13% / 24h +0.75%
- [Full coin archive](<https://whycoinmoves.com/en/coins/bitcoin>)

## Research for this archive

- [Crypto hacks and price impact: Bybit and Cetus case studies](<https://whycoinmoves.com/en/research/crypto-security-exploits-and-evidence-evolution.md>)
- [Why is crypto moving? How to check the evidence](<https://whycoinmoves.com/en/research/how-to-check-why-crypto-is-moving.md>)
- [Altcoin beta to Bitcoin: BTC, ETH, SOL and DOGE hourly returns](<https://whycoinmoves.com/en/research/hourly-returns-and-bitcoin-beta.md>)
- [Will Bitcoin go back up? Every crash since 2011 and its recovery time](<https://whycoinmoves.com/en/research/bitcoin-crash-recovery-time.md>)

Evidence levels describe source coverage, not the probability that a report is true. Price moves and their timing cannot establish a cause; minute samples show an observed interval and alert thresholds are heuristics. Explanations are model-assisted, with citations and figures checked. Source titles stay in their original language; full articles are not republished. [Methods and limitations](<https://whycoinmoves.com/en/methodology>)
