Chainalysis says hackers stole password hashes, auth tokens; KYT services to resume Nov 5

Nov 5, 2026 15:23 ET · 6h ago

TREE NEWS update: Chainalysis said hackers obtained password hashes and valid authentication tokens for all users on its platform, forcing the blockchain analytics firm to take down its KYT transaction monitoring, address screening, Reactor investigation platform, Data Solutions products and Chain (Beta) services. The firm said a man-in-the-middle attack on some customer passwords has been contained and fixed, with affected accounts locked until passwords are changed. Chainalysis plans to restore KYT and address screening from Nov. 5 via trusted IP whitelisting and is requiring users to reset passwords and, where applicable, rotate API keys.

Original source

AI take

The irony cuts deep: the firm compliance teams rely on to trace illicit flows has itself been compromised, and the exposure of authentication tokens alongside password hashes points to a session-level breach rather than a simple credential leak. The immediate burden falls on exchanges and compliance desks that depend on KYT and address screening for transaction monitoring, since the outage creates a gap in their own reporting chains. Whether the trusted IP whitelisting restores equivalent coverage, and whether token exposure extends beyond what the firm has disclosed, are the open questions worth watching.

Generated by AI for reference only.

Related News

29m ago Former Head of China’s Traditional Chinese Medicine Administration Yu Yanhong Under Investigation 40m ago MSCI Chair Fernandez: South Korea Must Implement Regulatory Changes Before Developed-Market Upgrade 1h ago Computing hardware stocks open lower; Dongshan Precision, Cambridge Technology hit limit-down 1h ago China’s MIIT Tightens Network Access Rules for AI Agent Terminal Devices 1h ago Japan PM Takaichi Wants BOJ ETF Sale Proceeds for Economic Security 2h ago DIFC Courts Propose Dispute Resolution Oracle for Tokenized Asset Enforcement

Pitch us Feedback