Today, we are releasing BTCPay Server v2.4.3-rc4, a security update addressing vulnerabilities reported by the Bitcoin Red Team,
@ProjectLoupe,
@MagicGrants,
@Premai_io, and independent researchers.
This release follows several days of nonstop work, review, and testing. It was built from our temporary private security repository, but to make these security fixes available as quickly as possible, we are releasing the Docker image publicly now.
This is a release candidate, so bugs may still be present. NFC is now opt-in, and the Phoenixd plugin is temporarily incompatible with this release. Please report any issues to the team. We will document behavioral changes within the main release.
Despite its RC status, we strongly recommend upgrading now using the standard process:
Server Settings > Maintenance > Update
or run or run btcpay-update(.)sh from the command line, removing the parentheses
If no significant issues are reported, the release candidate will be tagged as v2.4.3 and fully open-sourced within the next 48 hours.