DeFi· ★★· neutral·

BTCPay Server 2.4.5 tightens SSRF defenses and speeds up invoices

  • —SSRF protections added for Lightning, LNURL and invoice webhook requests
  • —Public invoice details are hidden one month after issuance
  • —Tor support is disabled after the update and must be re-enabled manually
  • —Legacy integrations Bitcoin Plus, Trezarcoin and JoinMarket were removed
Why it matters: Merchants and node operators should verify Tor settings and refund permissions right after upgrading, or payments and payouts may break.
#BTC
Source: Crypto Briefing
More on this
Security · Sep 17
BTCPay Server: default passwords, not code, caused the fund theft
 Security · Sep 17
BTCPay Server 2.4.4 closes LND vulnerability, but custom proxies remain a risk
 Security · Sep 14
BTCPay Server releases 2.4.4 update after attacks on LND API