Chainstack

Security incidents tagged Chainstack. Newest first.

1 Chainstack incident in the last 12 months

Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½LessMore

Brought to you byTinkerer Club

The private club for people who own their servers, run their own AI, and pay $0/month for software.

HighPartly patched
Chainstack breach exposed customer account data and password hashes; rotate node credentials
Blockchain RPC provider Chainstack disclosed on Nov 3 2026 that an external attacker reached parts of its infrastructure through a third-party component, in what it links to a broader late-October AI-powered attack campaign. Access began in a development environment on Oct 26, reached some production systems on Oct 29, and was cut on Oct 31 after detection; the investigation closed Nov 2. The attacker accessed a database with organization names, account-holder names, member email addresses and password hashes, and had access to systems holding node credentials. Chainstack says it has no evidence node credentials were read but is treating them as exposed. Customer-facing services kept running; payment card details are not stored. Customers must change passwords, rotate node credentials (self-service in the console), regenerate platform API keys, and watch for phishing.
Chainstack (RPC / node platform)Since Oct 26, 2026updated Nov 4, 2026, 12:33 UTC