The self-hosted crypto payment processor alerted on a critical vulnerability that was being actively exploited by threat actors and recommended updating or turning off the service to avoid loss of funds. BTCPay Server reported that the Bitcoin Red Team found and disclosed the vulnerability.