Lookonchain reports unauthorized attackers draining hot wallets on BTCPayServer instances and urges users to shut down their servers immediately.