BTCPay Server has urged users to install version 2.4.2 immediately after discovering that attackers are actively exploiting a critical vulnerability that could lead to stolen funds.

BTCPay Server tells users to install v2.4.2

BTCPay Server issued the warning through its official X account on Aug. 7, describing the vulnerability as critical and saying successful exploitation could result in the loss of funds.

The project instructed server administrators to open the Admin Dashboard and navigate to Server, Maintenance and Update. Operators should then confirm that the version number displayed in the server footer reads 2.4.2.

“There is a critical vulnerability being actively exploited on BTCPay Server, which can result in the loss of funds,” the project said.

Users who cannot complete the update immediately have been told to turn off their BTCPay Server until the patched version can be installed. The measure is intended to block further unauthorized access to servers that may remain exposed.

BTCPay Server did not identify which previous versions are vulnerable. It also did not disclose how attackers are gaining access, how many servers have been compromised, or whether any losses have been confirmed.

Critical flaw threatens self-hosted Bitcoin payments

BTCPay Server is an open-source payment processor that lets merchants accept Bitcoin and Lightning Network payments through infrastructure they control. Unlike custodial payment platforms, operators are responsible for maintaining and securing their own installations.

That structure reduces reliance on a centralized payment provider but places the responsibility for software updates on individual merchants and server administrators. A compromised installation could expose payment operations or other sensitive server functions, depending on the vulnerability’s reach.

The project’s recommendation to shut down systems shows the urgency of the threat. Operators should not leave an affected server online while waiting for a convenient maintenance period because BTCPay Server has confirmed that exploitation is already occurring.

Users should obtain the update through the server’s official maintenance interface and verify the 2.4.2 version string. The project has not advised users to rely on third-party downloads or unofficial fixes.

Bitcoin infrastructure faces wider security review

The disclosure follows another recent incident involving Bitcoin payment infrastructure. As reported by crypto.news, Zeus Wallet took its infrastructure offline after containing a cyberattack and began auditing its systems before restoring services.

Zeus said no customer funds were lost or placed at risk. It also said its investigation had not identified a vulnerability in Lightning node software. No evidence currently indicates that the Zeus incident and the BTCPay Server vulnerability are connected.

Security reviews have expanded across the Bitcoin ecosystem following a series of recent attacks. Crypto.news reported on Aug. 6 that the volunteer Bitcoin Red Team had found 4,962 potential issues while reviewing 390 Bitcoin-related projects.

The group classified 720 of those findings as high or critical severity. Its work covers Bitcoin wallets, cryptographic libraries and infrastructure software, although it did not publicly identify projects with unresolved critical flaws.

What BTCPay Server operators should do next

BTCPay Server operators should treat the upgrade as an emergency security action rather than a routine software update. Servers should remain offline if administrators cannot confirm that version 2.4.2 has been installed.

Merchants may also need to review server activity for signs of unauthorized access. However, BTCPay Server has not yet published indicators of compromise or technical details that operators could use to determine whether their systems were targeted.

Further information may follow once more users have installed the patch and public disclosure no longer increases the risk to unpatched servers. Until then, the project’s guidance remains limited but direct: update to v2.4.2 or shut down the server.

There is already money on the chain for the feature to serve. Onchain data aggregator RWA.xyz tracks about $1.38 billion of distributed real-world assets on XRPL, including $845.7 million of RLUSD. Ondo accounts for another $212.6 million, followed by VERT Capital at $116.1 million and Archax at $55.4 million. Societe Generale sits further down the table at $11.6 million.

That leaves more than $530 million of tracked tokenized assets outside RLUSD, though the market remains concentrated in a handful of issuers.

Confidential Transfers stays narrow in its first version. Holders have to opt into the encrypted format, and it currently works for direct MPT payments between accounts. It does not cover trades on XRPL’s built-in exchange, escrow or checks.

The other five are aimed at the same audience. Batch can package as many as eight transactions together, including an all-or-nothing mode where every step succeeds or none does. Sponsor lets one account cover another’s fees and reserve requirements, removing the need for a new user to hold XRP before transacting.

Permission Delegation lets an account authorize another party to submit only specified transaction types, giving a fund administrator limited authority without handing over full control. Dynamic MPT lets issuers change certain properties of a token after issuance.

A crypto user claims he lost his life savings after a sponsored Google result impersonating Trezor directed him to a phishing website.

Trezor user reports losing his life savings

A crypto user identified as David, who posts on X under the account @ReallyBadDay99, claimed on Aug. 7 that he lost his life savings after searching Google for “Trezor wallet.”

“Hey @Trezor, just lost my life savings. Top sponsored Google result for ‘Trezor wallet’ is a phishing site!” David wrote.

The sponsored result allegedly directed him to a page hosted on Google Sites that impersonated the hardware-wallet provider. David said the phishing operation was collecting funds through an address he shared with on-chain investigators ZachXBT and CertiK.

He also claimed the address was “vacuuming up millions.” However, the value of David’s loss, the total amount allegedly stolen from other users, and the address’s connection to the phishing website had not been independently verified at the time of publication.

A wallet recovery phrase gives its holder control over the associated cryptocurrency. If a victim enters the phrase on a fraudulent website, an attacker can restore the wallet on another device and transfer its assets without access to the original hardware wallet.

Blockchain transactions are generally irreversible, leaving victims with few options after funds have been transferred.

Trezor warns of sponsored phishing results

Trezor issued a broader warning hours after David published his claim, saying it was seeing an increase in phishing websites impersonating the company.

The hardware-wallet provider said some of the fraudulent websites were appearing in sponsored search results and could look highly convincing. It warned that entering a wallet backup on one of those pages could result in stolen funds.

“Never enter your wallet backup on a website or share it with anyone,” Trezor said in its Aug. 7 X post.

Trezor also told customers not to assume that a sponsored search result is legitimate. Users should verify that they are visiting the company’s official website before downloading Trezor Suite or entering information connected to their wallets.

The company’s post did not confirm David’s loss, identify the operators of the reported phishing page or estimate how much the campaign may have stolen. Trezor also did not say whether the specific Google Sites page identified in David’s post had been removed.

Google ads remain a recurring crypto attack vector

Sponsored search results have become a repeated delivery method for crypto phishing campaigns. Attackers purchase advertisements tied to wallet, exchange, and decentralized finance search terms, allowing fraudulent pages to appear above legitimate websites.

As previously reported by crypto.news, fake Uniswap advertisements promoted through Google search reportedly helped scammers steal at least $400,000 from several users in May.

Security Alliance data cited in that report connected malicious Google advertisements to approximately $1.27 million in losses between March 13 and March 30. The organization said it had blocked more than 356 malicious advertising links over the previous year.

The reported Trezor page being hosted on Google Sites also reflects a tactic in which attackers use trusted online services to make fraudulent pages appear safer. Google acknowledged in a June fraud advisory that scammers were abusing reputable cloud platforms to host phishing content and bypass security filters.

The continued use of Google’s advertising and hosting infrastructure makes the threat relevant to U.S. cryptocurrency holders who depend on search results to access wallet services. No U.S. regulator or law-enforcement agency had publicly announced an investigation into David’s reported loss at the time of publication.

Trezor users have faced similar phishing attempts

Crypto.news reported in February that scammers mailed fake Trezor and Ledger letters containing QR codes linked to phishing websites.

Those pages requested 12-, 20- or 24-word recovery phrases under the pretext of verifying wallet ownership. Although the delivery method differed, the campaign also relied on impersonating a trusted hardware-wallet provider and persuading users to disclose their backups.

Trezor advises customers to bookmark its official website and obtain Trezor Suite only through verified company channels. Anyone who entered a recovery phrase on a suspicious page should treat the wallet as compromised and move any remaining assets to a new wallet created with a fresh backup.

SHRMiner highlights growing interest in cloud mining as digital asset markets evolve, offering users access to mining services without specialized hardware.

Trump publicly criticized Bitcoin in 2021 but rapidly shifted his stance during the campaign, proposing to make the United States the “global cryptocurrency capital.”

After returning to the White House, he signed an executive order supporting the development of the digital asset industry. Meanwhile, reports indicate that Trump and his associated businesses have generated over $1 billion in gains through cryptocurrency.

As we enter 2026, cloud mining is emerging as a new area of ​​interest amidst the continued development of computing infrastructure and digital asset markets. For the average investor, the question arises: how can one generate $17,700 in passive income — or even more — despite constant market volatility?

Cloud mining, represented by platforms like SHRMiner, is rapidly gaining market attention. By providing rentable computing power services and earning mining rewards, it allows users to access the complete cloud mining process and earn passive BTC income without purchasing expensive equipment or specialized skills.

Recently, SHRMiner, a UK-based cloud mining platform, officially launched a new “free cloud mining service.” This service is designed for holders of mainstream cryptocurrencies such as BTC, XRP, DOGE, LTC, and EHT, providing users with a new opportunity to participate in cryptocurrency mining without any entry barriers.

How to earn passive income from BTC through SHEMiner cloud mining

Start earning returns in just three simple steps:

1. Register an account

By visiting the official SHRMiner website, users can register for a free account in less than two minutes and receive a $15 sign-up bonus; this bonus allows them to quickly experience the platform’s services and earn a daily return of $0.60 from a complimentary trial contract.

2. Select a cloud mining plan

Choose a cloud mining plan that suits specific needs and budget. The platform offers flexible plans ranging from $100 to $200,000 to meet the investment goals of different users.

3. Start earning returns

After purchasing a contract, earnings are automatically settled within 24 hours without requiring additional management or action; users can withdraw their earnings to their cryptocurrency wallet addresses at any time or reinvest the profits to benefit from the compounding effect.

The primary advantage of this model is that it significantly lowers the barrier to entry. Users do not need to research specific mining hardware models or hashrate configurations, nor do they need to set up their own system environments; simply by registering an account, depositing assets, and selecting a mining plan, they can start earning returns.

SHRMiner Platform Advantages:

• Supports daily automatic settlement
• No additional electricity or maintenance costs required
• Utilizes advanced ASIC mining hardware, powered by renewable energy sources including hydropower, wind power, and solar power
• Supports mining for multiple currencies: earn mainstream cryptocurrencies such as BTC, XRP, ETH, DOGE, USDC, USDT, SOL, LTC, and BCH.
• Equipped with SSL encryption and DDoS protection, a real-time earnings dashboard for easy monitoring of mining performance
• 100% remote access, fully accessible via the SHRMiner application or browser without hardware requirements, and 24/7 online technical support.
• Affiliate Program: The Affiliate Program allows users to earn up to 4.5% commission by referring friends, with the opportunity to earn an additional bonus of up to 30,000.

Examples of common contracts:

After purchasing a contract, earnings will be automatically credited to the user’s account within 24 hours. Upon contract expiration, the principal will be returned in full. Users may withdraw the principal or reinvest it to benefit from compound returns, click here for more details regarding the mining contract.

Unimaginable money-making opportunities

What sets SHRMiner apart is its extraordinary daily passive income; users have the opportunity to earn $10,700 or even more each day, turning the dream of online wealth into reality. Imagine generating substantial income without the need for ongoing investment or complex setups — that is exactly what SHRMiner offers.

Safety and Sustainability

In the mining sector, trust and security are paramount; SHRMiner fully recognizes this and prioritizes user safety above all else. Committed to transparency and legitimacy, SHRMiner ensures investments are protected, allowing users to focus on profitability. All mining facilities utilize clean energy, making this a carbon-conscious cloud mining operation. Renewable energy protects the environment from pollution while providing a powerful energy source.

In short

For those who are looking for ways to generate passive income, cloud mining is an excellent choice. When approached correctly, these opportunities allow them to effortlessly build cryptocurrency wealth on “autopilot” with minimal time investment. At the very least, they are far less time-consuming than any form of active trading. Passive income is the ultimate goal for every investor and trader, and with SHRMiner, maximizing passive income potential is easier than ever.

To learn more about SHRMiner, visit the official website.