Odaily Planet Daily reports that blockchain analysis firm Chainalysis stated that hackers have obtained password hashes and valid authentication tokens for all users on its platform. The company has taken offline its KYT transaction monitoring, address screening, Reactor investigation platform, Data Solutions products, and Chain (Beta) services.
Chainalysis stated that a "man-in-the-middle" attack targeting certain customer passwords has been contained and resolved; affected accounts will remain locked until passwords are changed. The company has no evidence that confidential investigation data was accessed or blockchain attribution data was altered.
Chainalysis plans to restore KYT and address screening services via a trusted IP address whitelist starting November 5, and is requiring users to reset passwords and rotate API keys where applicable. The company has engaged external cybersecurity experts and is using large language models to audit systems and strengthen defenses. (Bitcoin.com News)