Skip to content

Get notified

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Only used for pwn.watch incident emails. Protected by Cloudflare Turnstile.

Become a sponsor

One slot: pwn.watch, gifs.so, flavors.design, kitze.io, every kitze repo, and an X shout-out.

Secure checkout on Polar. Right after paying you set up your ad on kitze.io.

Rpc

Security incidents tagged Rpc. Newest first.

1 Rpc incident in the last 12 months

Critical 4 · High 3 · Med 2 · Low 1 · Update ½LessMore
Incidents
1
Live
1
Patched
0
Days without an incident
0
Longest quiet run: 2 days (Oct 27–Oct 28)

Brought to you byTinkerer Club

The private club for people who own their servers, run their own AI, and pay $0/month for software.

  • HighPartly patched

    Chainstack breach exposed customer account data and password hashes; rotate node credentials

    Blockchain RPC provider Chainstack disclosed on Nov 3 2026 that an external attacker reached parts of its infrastructure through a third-party component, in what it links to a broader late-October AI-powered attack campaign. Access began in a development environment on Oct 26, reached some production systems on Oct 29, and was cut on Oct 31 after detection; the investigation closed Nov 2. The attacker accessed a database with organization names, account-holder names, member email addresses and password hashes, and had access to systems holding node credentials. Chainstack says it has no evidence node credentials were read but is treating them as exposed. Customer-facing services kept running; payment card details are not stored. Customers must change passwords, rotate node credentials (self-service in the console), regenerate platform API keys, and watch for phishing.

    Chainstack (RPC / node platform)Since Oct 26, 2026