Dozens of copies of the open-source code remain online, so the tool can still be used in live attacks even as its maker moves to closed source.
Customers of the blockchain analytics firm must register trusted IP addresses and reset passwords and API keys before transactions can be registered again.
The exposed records are mostly contact and role details, but the firm has not yet said how many people were affected.
Confirmed post-exploitation at nine organizations shows AI-driven tooling moving from testing into live intrusions.
The episode also raises the question of whether current agent frameworks can show which agent acted, who approved it and why.
Because the intruders signed in as authorised users, the attack left little for defenders to spot before email and files were exposed.