BTCPay Server urged users to shut down hot wallets following reports of fund theft. The project has instructed operators to run the `./btcpay-down.sh` script and is investigating the matter. The alert did not specify affected versions or announce a patch.