Chainalysis Confirms Breach Involving AI-Driven Attack Techniques

Blockchain analytics company Chainalysis has disclosed a security incident in which an external actor used what it called "offensive agentic techniques" to gain unauthorised access to undisclosed internal systems and tools. In a post dated October 30, the company said the incident is unrelated to the Binance heist from the previous week.

The company said some non-sensitive customer data was accessed. This included user IDs, full names, email addresses and organisation role labels for users on its platform. Chainalysis is still working out which records for each customer organisation were affected and says it will provide a detailed breakdown once that analysis is done. It said it has no evidence that investigation content such as graphs, notes, cases or transaction query results was accessed. It also has no evidence that clear-text passwords, multifactor authentication secrets or user session tokens were taken.

Even so, Chainalysis warned customers to expect possible follow-on attacks. It urged users to stay "hyper-vigilant" about unexpected password reset requests or authentication prompts, and strongly recommended enabling two-factor authentication where it is not already on. The firm says it is investigating around the clock, patching affected vulnerabilities and hardening its systems, with help from third-party cybersecurity experts and large language models supporting a wider security review.