Chainalysis makes its money chasing crypto thieves. This month, someone broke into Chainalysis, and they used AI agents to do it.
The firm told customers an outside attacker used “offensive agentic techniques” to reach its systems. Its clients include more than 100 banks, plus exchanges and government agencies. Some of their staff names are now in a stranger’s hands.
What the Hackers Took
The attacker took user IDs, full names, email addresses, and job role labels, according to a Chainalysis announcement on Friday.
Chainalysis says case files, passwords, login codes, and session tokens show no sign of access. It calls the stolen data “non-sensitive.”
“Our teams have been working around the clock to investigate unauthorized activity, patch vulnerabilities, and harden our systems,” the team stated.
Agentic AI is software that plans and carries out tasks on its own, step by step. Chainalysis has not said how much of the break-in the AI did by itself.
North Korea Again?
A name tied to a job title tells an attacker exactly whom to target.
This week showed what one target can cost. Binance’s early findings trace its record $6.3 billion theft to a single engineer’s compromised laptop.
Chainalysis says its breach has nothing to do with Binance. Yet it is one of the firms tracing that stolen money. CEO Jonathan Levin pointed at North Korea.
“DPRK are up to their old tricks,” said Jonathan Levin.
Chainalysis Turns to AI to Fix an AI Break-In
Chainalysis has brought in outside security experts. It is also using large language models, the AI behind chatbots, to hunt for weak spots, Cybersecurity News reported.
Crypto has seen leaks like this before. In 2020, wallet maker Ledger said about 1 million customer emails were exposed, then warned users about phishing.
So an attacker used AI to get in. Chainalysis is using AI to shut the door. Its clients are still waiting to learn whose names were taken.
