DeFi· ★★· neutral·

BTCPay Server 2.4.5 makes Tor opt-in for Docker deployments

  • —Tor is no longer bundled in the default BTCPay Server Docker stack as of 2.4.5
  • —Operators must run sudo btcpay-fragments add opt-add-tor to enable Tor
  • —Existing data in Tor volumes is preserved after the update
  • —Outbound requests to private networks are blocked by default to prevent SSRF
Why it matters: Merchants relying on onion addresses for Bitcoin payments will lose access unless they opt into Tor during their next update.
#BTC
Source: CryptoSlate
More on this
DeFi · Oct 7
BTCPay Server 2.4.5 tightens SSRF defenses and speeds up invoices
 Security · Sep 17
BTCPay Server: default passwords, not code, caused the fund theft
 Security · Sep 17
BTCPay Server 2.4.4 closes LND vulnerability, but custom proxies remain a risk