October crypto-tracker hack: Access cracked, law enforcement tokens packed
Agentic 'on-path attack' went after Chainalysis's tools, which are routinely called upon to assist police investigations
On October 30, blockchain analysis firm Chainalysis detected an intrusion into its system, which later revealed attackers had obtained usernames, password hashes, and live tokens. The company, which serves high-profile global clients, stated that user IDs, full names, email addresses, and organizational role labels were exposed.
However, they did not reveal the encryption algorithm used for passwords, making it challenging to assess the vulnerability of hashed credentials. Some users received instructions to change their passwords, but the password reset functionality was offline. Chainalysis also noticed unusual activity on its transaction screening products, including the Reactor blockchain investigation platform, Data Solutions threat intelligence platform, and KYT (know your transaction) anti-money laundering solution.
At the time of the latest update on Thursday, November 5, KYT and the risk-intelligence Address Screening tool were set to be reinstated, requiring users to reset their passwords and rotate API keys. The company is actively working to reinforce its systems and restore Reactor and Data Solutions, informing customers about these changes as necessary.
Chainalysis remains tight-lipped about the attacker's identity, only suggesting that they potentially used AI agents and likening the incident to recent attacks on other tech platforms.
Written by urgent.news from The Register Science's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
This story
This is one outlet's version. Read the fullest account.
