AI agents robbed the crypto cops — every user's passwords and live tokens exposed

Chainalysis, the blockchain-tracing firm whose software helps the FBI, the DEA and Britain's National Crime Agency follow crypto crime, says an outside attacker using what it calls “offensive agentic techniques” broke into its systems and internal tools in October — AI agents doing the break-in, in the company's own words.

The scope kept widening: on November 4 the company disclosed that names, usernames, password hashes and live tokens for all of its users had been exposed, and that some accounts on its KYT transaction-screening product appeared to have been accessed without authorization. Its first notice on October 30 had claimed no credentials or session tokens were touched.

Chainalysis took its Reactor investigations platform, KYT and address-screening products offline, and on Saturday said it had restored Reactor, KYT and Address Screening with enhanced security — while still requiring every user to reset passwords and rotate API keys. It says it has no evidence investigation data was accessed.