Illustration, AI-generated from the story text. Tap a panel to read the story through it.
Chainalysis has taken Reactor and Data Solutions offline while outside investigators finish security checks, after what it told customers was an "external actor using offensive techniques." It says user names, emails and role labels were accessed and it has found no evidence that investigation content or were, and that the incident is unrelated to the Binance theft. Its transaction-monitoring products, which compliance teams depend on, stayed up.
Chainstack, a blockchain infrastructure provider, disclosed that an attacker moved from a development environment into production between October 26th and 31st, reaching its customer database with . It is treating node credentials as exposed.
WorkOS found an intruder in a sales application on October 30th, and its founder tied the activity to ARTEX, the open-source agentic attack framework.
The Hacker News ties Chainstack and WorkOS to one AI-driven campaign, while Chainalysis and Chainstack have named no attacker. Researchers say a China-linked group used ARTEX against more than 200 organizations in 14 countries from October 17th, with nine confirmed compromised.
Chainalysis pulls two products offline as a wave of AI-agent intrusions reaches Chainstack and WorkOS
Chainalysis has taken Reactor and Data Solutions offline while outside investigators finish security checks, after what it told customers was an "external actor using offensive agentic techniques." It says user names, emails and role labels were accessed and it has found no evidence that investigation content or credentials were, and that the incident is unrelated to the Binance theft. Its transaction-monitoring products, which compliance teams depend on, stayed up.
Chainstack, a blockchain infrastructure provider, disclosed that an attacker moved from a development environment into production between October 26th and 31st, reaching its customer database with password hashes. It is treating node credentials as exposed. WorkOS found an intruder in a sales application on October 30th, and its founder tied the activity to ARTEX, the open-source agentic attack framework. The Hacker News ties Chainstack and WorkOS to one AI-driven campaign, while Chainalysis and Chainstack have named no attacker. Researchers say a China-linked group used ARTEX against more than 200 organizations in 14 countries from October 17th, with nine confirmed compromised. SourcesABBC
Sources
- AChainalysis security incident informationchainalysis.com
- BChainstack reports production systems breach (The Hacker News)thehackernews.com
- BChainalysis breached using "offensive agentic techniques" (Help Net Security, search result)helpnetsecurity.com
- CInside ARTEX (ThreatMon, search result)threatmon.io
This story ran in the Morning Brief of November 4th 2026.