Multiple crypto projects may be at risk from a Railway vulnerability
Railway is a cloud platform used by many projects to run applications. Recently, it warned that hackers may have accessed and read some of its customers’ configuration data, including API keys, database passwords, and software repository accounts.
Railway has asked customers to rotate their keys and check for unusual activity while it continues its investigation.
Status of crypto projects:
Unaffected:
3Jane, Aave, Agora, Chainlink, Chronicle, Curvance, Ethena, EtherFi, Fluid, Kamino, Kinetiq, LayerZero, LlamaRisk, Maple, Midas, Morpho, Paxos/USDG, Reservoir, Spark, Tulipa, Upshift, and Yuzu.
Minor impact, addressed:
• infiniFi: Keys have been rotated.
• Monad: No private keys were exposed.
• Re: The affected keys were not critical and are being rotated.
Signs of exploitation:
• Swell (swETH, rswETH): Admin keys are suspected to have been exposed, putting around 2,500 ETH at risk, but no losses have been reported.
• There is currently no conclusive evidence that the Swell incident originated from Railway; the suspicion is based on the incidents occurring around the same time.
Railway is a cloud platform used by many projects to run applications. Recently, it warned that hackers may have accessed and read some of its customers’ configuration data, including API keys, database passwords, and software repository accounts.
Railway has asked customers to rotate their keys and check for unusual activity while it continues its investigation.
Status of crypto projects:
Unaffected:
3Jane, Aave, Agora, Chainlink, Chronicle, Curvance, Ethena, EtherFi, Fluid, Kamino, Kinetiq, LayerZero, LlamaRisk, Maple, Midas, Morpho, Paxos/USDG, Reservoir, Spark, Tulipa, Upshift, and Yuzu.
Minor impact, addressed:
• infiniFi: Keys have been rotated.
• Monad: No private keys were exposed.
• Re: The affected keys were not critical and are being rotated.
Signs of exploitation:
• Swell (swETH, rswETH): Admin keys are suspected to have been exposed, putting around 2,500 ETH at risk, but no losses have been reported.
• There is currently no conclusive evidence that the Swell incident originated from Railway; the suspicion is based on the incidents occurring around the same time.