BTCPay Server disclosed that a critical vulnerability is "being actively exploited" on Friday and urged users to update their servers to version 2.4.2, according to its official X account.

While the team said funds may be at risk, it is unclear how many users have been exploited or how much has been lost, if any.

"If you are unable to update right away, turn off your BTCPay Server to prevent unauthorized access until you can update," BTC Pay said.

Details surrounding the attack are also currently limited.

The Block reached out to BTCPay Server for comment.