Chainalysis Discloses Breach Involving AI-Driven Attack; Says It Is Unrelated to Binance Theft
The blockchain analytics firm says customer names, emails, user IDs and role labels were exposed, but it found no sign of credentials or investigation data being accessed.
Photo: Jernej Furman from Slovenia / CC BY 2.0 via Wikimedia Commons
Blockchain analytics firm Chainalysis said an attacker used "offensive agentic" AI techniques to gain unauthorized access to its internal systems and tools, according to crypto outlet Coingape, which linked to a company statement dated October 30. Chainalysis said the incident is unrelated to the roughly $6.3 billion theft from Binance that it has attributed to North Korea-linked hackers.
What was exposed
- User IDs
- Full names
- Email addresses
- Organization role labels
Chainalysis said it found no evidence that investigation content, authentication credentials or session tokens were accessed. It has notified all customers and said it is working "with leading cybersecurity experts to investigate this activity and harden our systems." It has not identified the attacker, said when the breach happened, or described the techniques used.
Why it matters
Names, email addresses and job roles can be used to craft targeted phishing messages, so affected customers may want to treat unexpected password-reset or login prompts with caution. Coingape noted that security experts say agentic AI can find vulnerabilities and coordinate multi-step attacks, but that is general context rather than a finding about this incident.
Context
Chainalysis separately reported that suspected North Korea-linked hacks account for nearly 89% of reported crypto hack losses so far this year, up from 15% in 2021. From 2021 through October 29, 2026, such hacks made up $13.24 billion of $22.34 billion in reported losses, about 59%, according to the same report.
