BTCPay Server, the open-source Bitcoin merchant payment software, issued an emergency update after a vulnerability (GitHub PR #7491) was actively exploited to bypass TOTP two-factor authentication via its Greenfield API Basic Authentication, allowing attackers to potentially steal funds from merchants. The patch addresses a critical crypto security risk for merchant wallets and payment providers, underscoring the need for rapid protocol updates to protect adoption and custody, and indicating short-term negative impact on trust.
Bearish