Crypto payments are now fully updated and have a new payout system. All crypto payments will be immediately delivered to each store's self-owned wallet. SellAuth will no longer provide wallets for its clients, which will prevent this issue from happening again if, in the unlikely event that an attacker were to gain RCE again.

Crypto payments and image uploading are back. Every shop has a new temporary wallet while the team focuses on reworking the way crypto payments are handled.

SellAuth has finished migrating its servers to a new VPS and has decided not to use Next.js for its checkout page due to the RCE vulnerability. However, crypto payments will continue to be unavailable until their team finishes implementing more security around that type of payment. Image uploading is also offline temporarily.

Our third-party payment processor has suffered a massive security breach caused by the recent React RCE vulnerability.

The attacker used this vulnerability to infiltrate the server and paid out 5% of their client's crypto wallets before they could shut down the crypto nodes and website.