• Chainalysis restored Reactor, KYT and Address Screening on November 7 after a major cyberattack.
  • Names, usernames, password hashes and live tokens for all users were exposed, though not every account was confirmed compromised.
  • Customers must reset credentials, rotate API keys where applicable and use approved IP addresses before reconnecting.

Chainalysis brought Reactor, KYT and Address Screening back online on November 7. This is after a cyberattack that exposed account information and active login tokens for all users. The blockchain analytics firm serves major customers, including the FBI, Coinbase and Barclays. But reopening the tools is only part of the recovery. Customers must also complete additional security checks before they can regain access.

An external actor and “offensive agentic techniques”

Chainalysis reported on the hack on October 30, claiming that an unauthorized person made use of “offensive agentic techniques” to access the company’s infrastructure and internal measures. The company has not revealed the specific AI tools used and how the hacker gained access.

By November 4, Chainalysis had discovered that names, usernames, password hashes, and live tokens for all users were exposed. Still, that does not mean every account was accessed.

Chainalysis also discovered an “on-path” attack that intercepted some customer passwords. The company stated that it has thwarted that method and confirmed:

“We are directly notifying customers whose KYT accounts appear to have been accessed without authorization.”

“We are directly notifying customers whose KYT accounts appear to have been accessed without authorization.”

Up to this moment, Chainalysis has found no evidence that investigation materials were accessed or its blockchain attribution data have been manipulated. The investigation is still underway.

Software back online, access still gated

Chainalysis has confirmed that the Reactor, KYT’s interface and API and Address Screening were operational once again on November 7. However, customers could not start working right away. As part of the phased reopening, they had to submit approved network IP addresses, reset passwords, and replace applicable API keys before registering transactions.

A November 8 status notice still listed the Customer Admin Portal and Training Academy as unavailable. Chainalysis had not confirmed the full restoration of Data Solutions. The firm emailed reconnection instructions, while customers can check its live dashboard for updates.

Why one vendor’s outage ripples outward

The Chainalysis outage highlights a risk for exchanges, banks and investigators that depend on the same blockchain-screening provider. When the service goes offline, checks on suspicious wallets and transactions may slow across multiple institutions. However, there is no evidence that this incident halted transactions or caused compliance violations.

In October, John Schindler, Secretary General of the Financial Stability Board, warned that if disruptions happen at one provider, multiple institutions can be affected across the borders.

As regulations surrounding cryptocurrencies are becoming stricter, this risk assumes even greater importance. According to the 2027 PwC report, the EU Anti-Money Laundering Regulation introduces its provisions beginning in July 2027, and the UK’s crypto regime goes live starting in October.

Meanwhile, Verizon’s 2026 report found system intrusions in 61% of the breaches studied. However, the research did not examine the Chainalysis attack.

A market already fighting over contracts

TRM Labs estimated $158 billion in illicit crypto flows in 2025, up nearly 145%. Hackers also stole $2.87 billion across nearly 150 incidents. Yet illicit activity’s share of overall crypto volume fell from 1.3% to 1.2%.

Competition among blockchain-monitoring firms is fierce. Cryptopolitan reported that Chainalysis challenged a $94.66 million US Immigration and Customs Enforcement contract awarded to rival TRM Labs. The breach raises questions about reliability in a business built on trust.

Chainalysis has not disclosed how many KYT accounts may have been accessed or quantified any wider financial loss. For now, the documented impact is exposed credentials, disrupted services and a gradual reopening.

If you're reading this, you’re already ahead. Stay there with our newsletter.

FAQs

What did the Chainalysis breach expose?

Chainalysis said names, usernames, password hashes and live tokens for all of its users were exposed to a malicious actor, and that a separate on-path attack compromised a subset of customer passwords. The firm says it found no evidence that investigation data was accessed or attribution data manipulated.

Which Chainalysis products are back online?

Reactor, KYT (user interface and API) and Address Screening returned by November 7. At the last verified status update on November 8, the Customer Admin Portal and Training Academy were still listed as unavailable while the company worked to restore remaining services.

What do customers have to do to regain access?

Customers must submit trusted IP addresses for an allowlist and reset their passwords and rotate API keys where applicable before they can register transactions again, according to Chainalysis.

Disclaimer. The information provided is not trading advice. Cryptopolitan.com holds no liability for any investments made based on the information provided on this page. We strongly recommend independent research and/or consultation with a qualified professional before making any investment decisions.

Ibiam Wayas

Ibiam Wayas has covered the crypto news beat since 2019. He studied Computer Science at National Open University of Nigeria. His work has appeared on various crypto news platforms, including Coinfomania, Crypto News Australia, and AltcoinBuzz. Drawing on his background in Computer Science, he now focuses on crypto, robotics, and longevity news.

5 Ingenious Applications of ChatGPT And What You Should Do About Them

93% Business Leaders Favor AI-Powered Solutions for Brand Sustainability Management, Reuters

Here’s How Macron Supports France’s Vibrant and Productive AI Ecosystem

Bloomberg Estimates the Generative AI Market to Reach $1.3 Trillion by 2032