According to CoinMeta, btcpay and server have received reports that attackers transferred funds from their hot wallets. The team is investigating the security incident and urges operators running these instances to immediately use ./btcpay-down.sh to shut down their instances. At present, the cause of the attack and the scope of its impact are still unclear. (Source: bitcoin and news)