01
Security
Chainalysis Breach Exposes User Credentials and Forces Service Shutdowns
Customers of the blockchain analytics firm must register trusted IP addresses and reset passwords and API keys before transactions can be registered again.
Customers of the blockchain analytics firm must register trusted IP addresses and reset passwords and API keys before transactions can be registered again.
The attack needed no software bug, and the agent's own permissions were enough to run commands, send data out and delete files.
Railway has paused deployments and begun restoring builds, starting with Pro and Enterprise workspaces, while it investigates the incident.
The company is adding more MCP support, but its co-founder says the standard still has limits and wider access can increase abuse risk.
Some users faced unauthorized charges after stored keys were exposed, and OpenCode says refunds are now underway.
The service gives agent builders a managed runtime and controlled tool access instead of making them assemble that layer themselves.