Skip to content
NewA calmer, faster ZeroHour
Data breachhighExploited in the wild

Chainalysis hack exposes passwords and tokens

Original title: October crypto-tracker hack: Access cracked, law enforcement tokens packed

The Register · Securityby Connor Jones ()3 min read1
Part of a story covered by 5 sourcesChainalysis Breach Exposes All Users' Credentials via Agentic AttackMerged summary & timeline
AI summary · x-ai/grok-4.7Summaries by Vani AI

Attackers used agentic on-path techniques to steal usernames, password hashes and live tokens from Chainalysis systems.

Chainalysis confirmed an October intrusion where attackers gained unauthorized access via agentic techniques and an on-path attack. Exposed data includes usernames, password hashes, emails and organizational roles. Live tokens were also accessed, along with abnormal activity on transaction screening tools. Services including the Reactor blockchain platform used by law enforcement were taken offline. No evidence shows investigations data or attribution was accessed. Password reset is down and KYT is being restored.

Key facts
  • Password hashes and live tokens accessed
  • Services including Reactor taken offline
  • No evidence investigations data accessed
  • Users urged to reset credentials
Security assessment · AI, from the articleExploited in the wild

Impact: usernames password hashes live tokens exposed

ProductAffected
Chainalysis Reactor—
Chainalysis Data Solutions—
Chainalysis KYT—
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

From the original article

3 min read at theregister.com

Agentic 'on-path attack' went after Chainalysis's tools, which are routinely called upon to assist police investigations

The Register · Security

By Connor Jones · theregister.com

Read the full article at The Register · Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.