Chainalysis reports access to its systems using “offensive agentic techniques”

Chainalysis, a US blockchain analytics company that works with authorities and cryptocurrency platforms, reported on Friday, October 30, that it detected an external attacker who used "offensive agentic techniques" to gain unauthorized access to its internal systems and tools during this month, according to the statement published on its blog. The company has not explained what role artificial intelligence played in the attack or which vulnerabilities were exploited.

According to Chainalysis, the attacker obtained user IDs, full names, email addresses and the role within their organization of the users registered on its platform. The company says that, so far, it has found no evidence of access to the content of its customers' investigations, query results, passwords, two-factor authentication secrets or session tokens.

Chainalysis has not said how many customers are affected or when it detected the intrusion, and declined to answer questions from The Block. It has hired outside experts, is using language models to review the security of its platform, and recommends enabling two-factor authentication and being wary of unexpected password change requests.

The company states that the incident is unrelated to the theft suffered by Binance, which Chainalysis is analyzing and attributes to North Korean groups, according to The Block.