The blockchain analytics firm has resumed operation of its Reactor software, but now requires customers to submit trusted-IP allowlists and update passwords to regain access. While some compliance services have returned, the company said that several other investigation tools remain under maintenance following a week of outages.
The disruption stems from a cyberattack that exposed the login credentials and active authentication tokens of Chainalysis’ entire user base, as well as some plaintext passwords. The firm first reported the breach on Oct 30, later attributing the incident to a hacker using offensive AI agent technology. Chainalysis has not specified the number of accounts accessed without authorization, though it stated it has found no evidence that investigation or attribution data was manipulated.
