# Blockchain Infrastructure Firms Hit by AI-Powered Cyberattacks Chainalysis and Chainstack report data breaches involving stolen credentials and unauthorized system access. - **Source:** [www.theregister.com - Articles](https://brifing.si/source/2c34ea50-d341-4a10-925d-12c012a9ad10) - **Published:** 2026-11-05 - **Topic:** [technology](https://brifing.si/c/technology) - **Original article:** - **On Brifing:** https://brifing.si/s/92c7acc5-9ed1-4a13-8c59-ac263f3cf326 ## Coordinated AI-Driven Intrusions Blockchain analysis firm Chainalysis and infrastructure provider Chainstack recently confirmed separate security breaches. Both incidents involve external actors utilizing offensive agentic techniques to infiltrate internal systems. These attacks are part of a broader, ongoing campaign targeting high-value technology platforms, raising significant concerns regarding the automated nature of modern digital threats. ## Chainalysis Data Exposure Chainalysis confirmed that attackers accessed usernames, password hashes, and live tokens during an October 30 intrusion. While the company previously disclosed the exposure of email addresses and organizational roles, the inclusion of live tokens and password hashes represents a severe escalation. The firm has not specified the hashing algorithm used. ## Service Disruptions and Remediation Following the breach, Chainalysis took critical products like Reactor and Data Solutions offline to harden infrastructure. The company is currently restoring services, requiring customers to provide trusted IP addresses for allowlisting. Users are mandated to reset passwords and rotate API keys to regain secure access to these business-critical platforms. ## Chainstack Infrastructure Breach Chainstack reported that attackers gained access to a development environment on October 26, eventually reaching production systems. The breach exposed customer account information, including names, emails, and password hashes. Although there is no evidence that node credentials were read, the company is treating them as compromised and advises immediate rotation. ## The Role of AI Agents Both companies identified the use of autonomous AI agents in their respective attacks. These tools enable threat actors to automate intrusion phases, increasing the speed and scale of operations. Security experts note this trend exploits vulnerabilities like exposed applications and stolen credentials, necessitating more robust monitoring and rapid incident response. ## Broader Industry Impact The campaign extends beyond blockchain firms, with API platform WorkOS and the Dutch Institute for Vulnerability Disclosure also reporting security incidents. These attacks share technical overlaps, with some linked to clusters utilizing the ARTEX framework. This pattern highlights a growing vulnerability among organizations relying on complex, interconnected digital infrastructure. ## Security Recommendations for Users Affected organizations are urging customers to remain vigilant against potential phishing attempts. Users should rotate credentials across all services, particularly if they have reused passwords from compromised accounts. Chainalysis and Chainstack emphasize that proactive credential management and monitoring for unusual activity are essential steps to mitigate further unauthorized access risks. ## Ongoing Investigation Status While Chainalysis continues to investigate the scope of the attack, it maintains that no investigation data has been manipulated. The firm is working with outside experts to restore services securely. As the investigation into these multifront cyberattacks continues, the industry faces increased pressure to harden systems against sophisticated, AI-driven threats. ## Sources covering this story - [The Hacker News — Chainstack Reports Production Systems Breach via AI-Powered Attack](https://thehackernews.com/2026/11/chainstack-reports-production-systems.html) - [www.theregister.com - Articles — Chainalysis Confirms Breach of User Credentials and Live Tokens](https://www.theregister.com/cyber-crime/2026/11/05/october-crypto-tracker-hack-access-cracked-law-enforcement-tokens-packed/5307852) - [www.theregister.com - Articles (theregister.co.uk) — Chainalysis Confirms Sensitive Data Breach in October Cyberattack](https://www.theregister.com/cyber-crime/2026/11/05/october-crypto-tracker-hack-access-cracked-law-enforcement-tokens-packed/5307852) - [www.theregister.com - Articles — Chainalysis Confirms October Breach Involving Stolen Credentials and Tokens](https://www.theregister.com/cyber-crime/2026/11/05/october-crypto-tracker-hack-access-cracked-law-enforcement-tokens-packed/5307852) - [Bitcoin News — Chainalysis Breach Exposes All User Credentials, Forcing Platform Shutdown](https://news.bitcoin.com/crypto-news/chainalysis-breach-exposes-passwords-tokens-all-users/) --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._