Chainstack says AI-powered security breach exposed customer data and threat now contained
The firm said its platform stayed online while urging users to replace node credentials, update passwords and monitor for suspicious activity.
Key takeaways
- 1Node credentials and API keys were exposed, prompting a mandatory rotation for all customers
- 2Chainstack’s services remained online and the breach is reported as contained
Chainstack said on 12 November 2026 that an AI-powered security breach exposed customer data and that the threat is now contained.
The breach involved node credentials used to access the company’s managed blockchain services. Chainstack treated the credentials as compromised and instructed customers to rotate them and change associated passwords. The exposed data included node endpoint URLs and API keys that could allow unauthorised interaction with blockchain networks. The firm said its platform stayed online throughout the incident, isolated the affected systems and engaged security experts.
Chainstack provides developers with hosted blockchain nodes and APIs for networks such as Ethereum, Bitcoin and Solana, enabling rapid deployment of decentralized applications. Its service is a key piece of the Web3 stack, allowing projects to avoid running their own full nodes. Clients include DeFi platforms and NFT marketplaces, making credential security critical for the broader ecosystem.
The incident shows the growing risk of AI-driven attacks on blockchain infrastructure providers. Users are likely to audit their access controls and monitor for unusual activity. Regulators may scrutinise infrastructure providers for cyber-risk controls, and observers will watch for any malicious transactions linked to the compromised credentials. Chainstack said it will continue to investigate and update customers on further steps.
Reported and edited by the YourKhabri desk under our editorial policy. Nothing here is investment advice.