Chainalysis, the company helping trace billions of dollars stolen from Binance, has disclosed a cyberattack of its own. The crypto investigations firm said Friday that it had notified all customers and brought in outside cybersecurity experts to investigate and strengthen its systems.
Its initial finding offers some reassurance to customers who use its software for sensitive investigations: the company says it has found no evidence that attackers accessed investigation content, authentication credentials or session tokens. It stressed that this assessment reflects the investigation so far.
In a public notice dated October 30, the company said:
Chainalysis was recently the target of a cybersecurity incident, similar to many other tech platforms in recent weeks.
The statement gave no date for the attack, named no suspected attacker and did not explain how access was attempted or obtained. It also did not identify which systems were affected or put a figure on any financial loss.
What the company says is safe
The most important part of the disclosure concerns the information customers rely on to track financial crime. Chainalysis supplies investigation and compliance software to organizations including law enforcement agencies, financial institutions and cryptocurrency exchanges.
Its tools help users follow funds across blockchains, check wallet addresses and monitor transactions for risk. Investigation content is therefore a particularly sensitive category in this incident, alongside the credentials used to log in and the session tokens that keep users signed in.
Much of the transaction data behind that work is publicly visible on blockchains. Customers then use the software to follow connections between wallets and build investigations, which makes access to their workspaces a security concern.
The company described its findings this way:
Based on the investigation to date, we have found no evidence of unauthorized access to investigation content, authentication credentials, or session tokens.
That wording leaves the investigation open. It provides a specific finding about those three categories, rather than a complete account of everything the attackers might have reached. The notice does not list any other information that was accessed.
A separate attack from the Binance theft
The disclosure comes while the firm is investigating the largest exchange theft in crypto's history. As previously reported by Apex in our live coverage, Chainalysis has linked the Binance attack to North Korean hackers and has been tracing the stolen funds alongside other industry participants.
The company explicitly says its own security incident is unrelated to that theft. There is no basis in its notice to transfer the North Korea attribution from Binance to the attack on Chainalysis.
In its separate Binance analysis, published Friday, investigators estimated that approximately $6.4 billion had left exchange hot wallets. They attributed that theft to TraderTraitor, citing stolen Binance funds mixing with proceeds from the earlier Bitget attack.
The same report described thousands of transactions and repeated transfers between addresses, which investigators said suggested automated laundering. It also said Chainalysis had shared leads with partners working to identify and freeze stolen assets. Those observations concern the Binance money trail; they do not explain how the analytics company's own systems were targeted.
For customers, the next information is expected to come directly from the firm. Chainalysis said it had proactively notified every customer and would keep them updated as the investigation progressed. Its public notice did not identify the outside cybersecurity specialists working on the case or give a deadline for further findings.
The company has also not published a technical explanation of the attack, a final assessment of its scope or details of any changes customers need to make to their accounts. Those questions remain unanswered in the initial disclosure.