Bitcoin Magazine

Swiss Bitcoin Pay Shuts Down Servers After Data Breach

Another day, another data breach. 

Swiss Bitcoin Pay, a non-custodial bitcoin payment processor, said that it had to temporarily shut down its servers following a data breach on Monday. 

The Neuchâtel, Switzerland-based company said that user funds were safe but customer email addresses, bitcoin addresses and IBANs, transaction history, and hashed passwords were believed to be breached. 

A malicious user has likely gained access to Swiss Bitcoin Pay’s internal systems. As a precaution, we are temporarily shutting down our servers while we investigate and secure our infrastructure.

At this stage, we believe they may have accessed customer email addresses, Bitcoin…

— Swiss Bitcoin Pay (@SwissBitcoinPay) September 14, 2026

The announcement comes amid a run of breaches hitting bitcoin and fintech firms. Revolut confirmed last week that it handed customer passports, driver’s licenses, verification selfies and transaction histories to an unauthorized party that sent fraudulent requests from a legitimate government agency’s email domain. 

And top hardware wallet manufacturer Trezor last week warned that a data breach at the third-party marketing platform it uses for sending newsletters was leading criminals to target customers with phishing attacks. 

“A malicious user has likely gained access to Swiss Bitcoin Pay’s internal systems …As a precaution, we are temporarily shutting down our servers while we investigate and secure our infrastructure.” Swiss Bitcoin Pay said on Monday. 

The company added that; “User funds are safe, and any amounts owed to users will be fully returned.”

Swiss Bitcoin Pay did not immediately respond to Bitcoin Magazine’s request for comment. 

The company lets businesses accept Bitcoin payments quickly and easily using both on-chain transactions and the Lightning Network. 

Criminals have increasingly been targeting data in 2026. Scammers in January were able to get hold of customer information via crypto wallet Ledger’s payment processor Global-e to send phishing emails. 

Crypto wallet provider SafePal last month also announced a data breach that involved ​unauthorized access to about 39,798 customers’ order information, ‌including personal details such as names, addresses and purchase data.

This post Swiss Bitcoin Pay Shuts Down Servers After Data Breach first appeared on Bitcoin Magazine and is written by Mathew Di Salvo.

Bitcoin Magazine

BTCPay Server Offers a 3 Bitcoin Bounty for Recovery of Stolen Funds After Wallet Exploit

Supporters of BTCPay Server have committed to funding a bounty of up to three Bitcoins for the recovery of funds stolen through a recently disclosed vulnerability in the open-source bitcoin payment processor, the project said in a statement.

The bounty is set at 10 percent of whatever is recovered, capped at three coins in the event of a full recovery. 

The project even extended the offer to the attacker directly alongside anyone else holding actionable information, directing them to a dedicated security address and offering Signal or other encrypted channels on request. 

Hackers last week managed to extract Lightning Network admin macaroon credentials from affected BTCPay Server instances. The project published technical details and remediation guidance in a separate security advisory.

“To the users who lost funds: we are sorry,” the project said in a statement. “We will examine our mistakes, but regret alone will not help affected users or secure the project. There is no time to waste. We have to learn, improve, and act quickly.”

The BTCPay Server Foundation said it would donate 0.21 Bitcoins to Sparrow Wallet developer Craig Raw and a further 0.21 Bitcoins to the Bitcoin Red Team fund in recognition of their responsible disclosure of the vulnerability.

Separately, the project said it has been contacted by security teams at exchanges, blockchain analytics firms and law enforcement agencies offering assistance in tracking the stolen coins. 

Affected users who have not yet come forward are being asked to share on-chain addresses and transaction details, and to file reports with local authorities and any exchange or service where the funds surface. 

Individual reports, the project said, help preserve records and establish a chain of evidence that improves the odds of funds being frozen.

The project added that improving AI models are making it faster and cheaper to comb large codebases for weaknesses, shifting the balance toward attackers, and that Bitcoin projects are feeling it first because they are unusually valuable targets.

This post BTCPay Server Offers a 3 Bitcoin Bounty for Recovery of Stolen Funds After Wallet Exploit first appeared on Bitcoin Magazine and is written by Mathew Di Salvo.