【Blockchain analytics giant Chainalysis expands breach disclosure: password hashes + active tokens, all users affected】
On October 30, Chainalysis initially said that user IDs, names, and email addresses had been leaked, with “no evidence that authentication credentials or session tokens were accessed.” But its latest update changed that: all users’ names, usernames, password hashes, and live tokens were exposed to attackers. An “on-path attack” also resulted in some customers’ passwords being compromised; the affected accounts have been locked and password resets required.
The company currently says there is no evidence that investigation data was accessed or that attribution data was tampered with. However, Reactor and Data Solutions have been taken offline, while KYT (web interface + API), address screening, and the login page were temporarily taken offline due to unusual activity.
An engineer’s checklist of things to watch out for:
1️⃣ Teams that have used Chainalysis: reset passwords and rotate all API keys—not just passwords. If live tokens remain valid, it’s like leaving the door unlocked;
2️⃣ People who reuse passwords are most at risk. Once hashes are cracked through credential stuffing, exchanges and email accounts could also be affected. Be sure to enable 2FA/Passkeys;
3️⃣ For exchange APIs, be sure to bind them to an IP allowlist and disable withdrawal permissions—the same principle was behind Binance revoking all SignalPlus API keys last week.
The fact that compliance monitoring tools themselves have become targets is a reminder: the weakest link in the security chain is often a third party.
Do you have Passkeys or hardware keys enabled for your exchange accounts? Share your thoughts in the comments.
$BNB $BTC
#币安广场 #加密安全 #API security
DYOR, not investment advice
On October 30, Chainalysis initially said that user IDs, names, and email addresses had been leaked, with “no evidence that authentication credentials or session tokens were accessed.” But its latest update changed that: all users’ names, usernames, password hashes, and live tokens were exposed to attackers. An “on-path attack” also resulted in some customers’ passwords being compromised; the affected accounts have been locked and password resets required.
The company currently says there is no evidence that investigation data was accessed or that attribution data was tampered with. However, Reactor and Data Solutions have been taken offline, while KYT (web interface + API), address screening, and the login page were temporarily taken offline due to unusual activity.
An engineer’s checklist of things to watch out for:
1️⃣ Teams that have used Chainalysis: reset passwords and rotate all API keys—not just passwords. If live tokens remain valid, it’s like leaving the door unlocked;
2️⃣ People who reuse passwords are most at risk. Once hashes are cracked through credential stuffing, exchanges and email accounts could also be affected. Be sure to enable 2FA/Passkeys;
3️⃣ For exchange APIs, be sure to bind them to an IP allowlist and disable withdrawal permissions—the same principle was behind Binance revoking all SignalPlus API keys last week.
The fact that compliance monitoring tools themselves have become targets is a reminder: the weakest link in the security chain is often a third party.
Do you have Passkeys or hardware keys enabled for your exchange accounts? Share your thoughts in the comments.
$BNB $BTC
#币安广场 #加密安全 #API security
DYOR, not investment advice