Chainalysis 披露所有用户认证信息遭泄露，部分明文密码也被窃取
Chainalysis: Names, Usernames, Password Hashes, and Valid Tokens of All Users Were Exposed; Some Plaintext Passwords Also Leaked Blockchain analytics firm Chainalysis disclosed in an updated security incident notice that the names, usernames, password hashes, and valid authentication tokens of all users had been exposed to the attacker, and that some customers’ plaintext passwords were also leaked through a separate attack method. After detecting abnormal activity, the company suspended KYT transaction monitoring, address screening, and login services, and required all users to reset their passwords and rotate API keys where necessary. Previously, on October 30, Chainalysis first disclosed that it had been breached by a hacker using offensive AI agent technology; at that time it only confirmed that certain customer identity information had been accessed and said it had found no evidence that passwords or session tokens had been leaked.
Chainalysis 更新安全事件通报称，所有用户的姓名、用户名、密码哈希和有效认证令牌均暴露给攻击者，部分客户的明文密码也通过另一种攻击方式泄露。公司发现异常活动后暂停了 KYT 交易监控、地址筛查和登录服务，要求所有用户重置密码，并在必要时轮换 API 密钥。
短线市场方向不明，泄露信息可能增加账户被盗用风险。用户可重置密码，并在必要时轮换 API 密钥。
来源：WuBlockchain · x.com