Bitcoin company BTCPay Server told users to install the latest version of the server and replace credentials that may have been exposed.