BTCPay Server v2.4.2 contains the required security update.The vulnerability is already being actively exploited, according to the project.Operators unable to update should shut down their servers immediately.BTCPay Server has not disclosed the attack method or total financial losses.