Chainstack Confirms AI-Linked Breach Exposing Customer Data, Treats Node Credentials as Exposed

TL;DR Chainstack disclosed a breach exposing customer information and potentially node credentials, while saying customer nodes, its console and API were not modified. The attacker entered through an exposed Grafana instance, reached an unauthenticated MCP server with cluster-admin rights and used ARTEX, a framework that orchestrates LLM agents. Chainstack found no evidence node credentials were read, but told customers to rotate them, change passwords, regenerate API keys and monitor phishing attempts. Chainstack has disclosed a security breach that exposed customer account data and potentially node credentials, linking the intrusion to a broader AI-powered attack campaign. In its official incident report , the Web3 infrastructure provider said an external attacker entered through a third-party component and reached production systems after first compromising a development environment.

BeCrypto News shows a short excerpt and links to the publisher. The full report belongs to Crypto Economy.