According to Unchained, the BTCPay Server team reported that no wallet drains have occurred on its latest release following a request to merchants temporarily go offline. The team asked merchants to disconnect their stores from external connections as a precautionary measure during the rollout of the update. No evidence of unauthorized withdrawals or theft was observed among merchant wallets since implementing this step. The action was taken to reduce exposure while verifying security stability post-update. Merchants were instructed to remain offline until they confirmed safe reconnection. The server team has not disclosed specific timeframes for when merchants returned online, nor provided technical details about the underlying vulnerability or threat context that prompted the measure. No incidents involving lost funds, unauthorized access, or exploit usage have been reported by BTCPay Server since deploying the latest release and enforcing the temporary offline instruction.
