Blockchain Analysis Giant Chainalysis Hit by 'Agentic' Cyberattack
AI-generated image · US National Wire
Law enforcement tools and user credentials compromised in an 'on-path' attack that has crippled critical investigation platforms.
Chainalysis, a leading blockchain analysis firm frequently used by global law enforcement to track cryptocurrency crime, has confirmed a significant security breach. According to reporting from The Register, the company detected an intrusion on October 30 involving an external actor utilizing "offensive agentic techniques."
While initial disclosures focused on the exposure of user IDs, full names, and email addresses, a late Wednesday update revealed a more severe compromise. The Register reports that attackers successfully accessed usernames, password hashes, and live tokens. Chainalysis has not disclosed the specific hashing algorithm used for passwords, leaving the ease of offline cracking unknown.
The breach has resulted in the shutdown of several business-critical services. The Register notes that the company took down its Reactor blockchain investigation platform—used by international law enforcement—as well as the Data Solutions threat intelligence platform and the KYT anti-money laundering user interface. Chainalysis described the incident as an "on-path attack," or attacker-in-the-middle (AitM) attack.
Chainalysis maintains it has found no evidence that investigation data was accessed or attribution data manipulated. The company is currently working to restore services, requiring users to provide trusted IP addresses for allowlisting, reset passwords, and rotate API keys.
Chainalysis is a primary partner for government agencies and financial institutions, having played a key role in the takedowns of the LockBit ransomware operation, the bulletproof hosting provider Virtualine, and the crypto-laundering network AudiA6.