---
title: "BTCPay Server warns operators of hot wallet thefts on outdated software"
description: "BTCPay Server urged operators to shut down their servers after reports of unauthorized attackers draining funds from hot wallets, Cointelegraph reported. The…"
language: en
canonical: "https://whycoinmoves.com/en/events/holotoken-btcpay-server-warns-hot-wallet-402464a098fb32"
published: 2026-11-02T21:05:57.000Z
updated: 2026-11-02T22:06:00.000Z
indexable: false
---

# BTCPay Server warns operators of hot wallet thefts on outdated software

BTCPay Server urged operators to shut down their servers after reports of unauthorized attackers draining funds from hot wallets, Cointelegraph reported. The…

Attributed sources: [Cointelegraph](<https://cointelegraph.com/news/btcpay-server-hot-wallet-thefts-older-versions>)

## Key facts

BTCPay Server urged operators to shut down their servers after reports of unauthorized attackers draining funds from hot wallets, Cointelegraph reported. The warning was tied to servers running outdated software.
Evidence strength: Single source, 1 publisher group(s) (Cointelegraph).
After site detection, observed returns were 5 minutes: -0.85% (difference from BTC -0.89 pts; Nov 2, 2026, 21:05 → Nov 2, 2026, 21:10, UTC; Gate · USDT); 1 hour: -4.42% (difference from BTC -4.43 pts; Nov 2, 2026, 21:05 → Nov 2, 2026, 22:05, UTC; Gate · USDT)
In the preceding 30 days, the 99th percentile of absolute hourly returns was 4.17% (Gate · USDT; cutoff Nov 2, 2026, 21:05, UTC).

## Returns after site detection

| Window | Return | BTC | Difference from BTC | Actual sampled interval (UTC) | Source |
| --- | --- | --- | --- | --- | --- |
| 5 minutes | -0.85% | +0.05% | -0.89 pts | Nov 2, 2026, 21:05 → Nov 2, 2026, 21:10 | Gate · USDT |
| 1 hour | -4.42% | +0.00% | -4.43 pts | Nov 2, 2026, 21:05 → Nov 2, 2026, 22:05 | Gate · USDT |

## Historical hourly baseline

| Metric | Value |
| --- | --- |
| Coverage | 99.7% (718/720) |
| Median absolute hourly return | 0.50% |
| 99th percentile of absolute hourly returns | 4.17% |
| BTC beta | 1.30 |
| Source / cutoff (UTC) | Gate · USDT / Nov 2, 2026, 21:05 |

## Claims and open questions

- BTCPay Server urged operators to shut down their servers after receiving reports of unauthorized attackers draining funds from hot wallets, according to Cointelegraph.
- Cointelegraph reported that the thefts affected hot wallets running on outdated software.
- Which specific BTCPay Server versions are affected by the reported hot wallet thefts, and what patch or upgrade resolves the issue?
- How much in funds was drained across the reported hot wallet thefts, per BTCPay Server or an official statement?

## Source evidence

- [BTCPay Server warns of hot wallet thefts running on outdated software](<https://cointelegraph.com/news/btcpay-server-hot-wallet-thefts-older-versions>) — Cointelegraph; published Nov 2, 2026, 05:34; received Nov 2, 2026, 21:05 (UTC).


## Recent HOT events and market reactions

No other publication-ready HOT events yet.

- [Full coin archive](<https://whycoinmoves.com/en/coins/holotoken>)

## Recent General news events on other coins

- [BTC: Strive adds 124 Bitcoin in roughly $10 million purchase](<https://whycoinmoves.com/en/events/bitcoin-strive-inches-closer-becoming-second-c5e693490c361e>)
- [BTC: Strategy buys 811 bitcoin for $65.5 million and repurchases $208.2 million of STRC](<https://whycoinmoves.com/en/events/bitcoin-we-found-room-even-more-d527768cae2b1f>)
- [BTC: Analysts keep buy ratings on Strategy after preferred-stock changes](<https://whycoinmoves.com/en/events/bitcoin-strategy-s-preferred-stock-fix-5dda0febed475b>)
- [General news](<https://whycoinmoves.com/en/topics/general>)

Evidence levels describe source coverage, not the probability that a report is true. Price moves and their timing cannot establish a cause; minute samples show an observed interval and alert thresholds are heuristics. Explanations are model-assisted, with citations and figures checked. Source titles stay in their original language; full articles are not republished. [Methods and limitations](<https://whycoinmoves.com/en/methodology>)