Major incident

Chainalysis: Security-related maintenance work

Affected: KYT API, Reactor, Hexagate, KYT UI, Address Screening, Rapid Lookup, Sentinel

Current status of Chainalysis: Under maintenance — live Chainalysis status

Timeline

1. Nov 2, 2026, 15:50 UTC
   investigating
   As part of our security-related maintenance, Reactor is currently unavailable while the team completes critical work. Our transaction monitoring products, KYT and Address Screening, are running as usual with the exception of Graph preview in KYT and KYT’s integration with Reactor. The Chainalysis team will be in touch with more information.
2. Nov 2, 2026, 17:26 UTC
   investigating
   Our team is continuing to perform critical security-related maintenance work and Reactor may continue to be unavailable during this work. Users may also experience issues logging in during this time. We will provide our next update within the hour or as more information becomes available.
3. Nov 2, 2026, 18:29 UTC
   investigating
   Our security-related maintenance work is ongoing. We will continue to provide regular status updates every 1 hour while this work is ongoing.
4. Nov 2, 2026, 19:43 UTC
   investigating
   As part of our security-related maintenance work, Reactor remains temporarily unavailable. Data Solutions, Chain (Beta), and Rapid are also now temporarily unavailable while the team completes this work. Some Hexagate monitoring capabilities may be affected. We will keep our customers updated at least every hour.
5. Nov 2, 2026, 20:53 UTC
   investigating
   Our security-related maintenance work is still ongoing. We will continue to provide regular status updates while this work is ongoing.
6. Nov 2, 2026, 23:40 UTC
   investigating
   Our security-related maintenance is still in progress. We will continue to provide regular updates, with the next update expected within a few hours.
7. Nov 3, 2026, 02:15 UTC
   investigating
   Our security-related maintenance is still in progress. We will continue to provide regular updates, with the next update expected within a few hours.
8. Nov 3, 2026, 04:10 UTC
   investigating
   Our security-related maintenance is still in progress. For more details on the incident and maintenance, please refer to: https://www.chainalysis.com/blog/security-incident-october-30/ We'll continue to provide updates in the next few hours as they become available.
9. Nov 3, 2026, 08:55 UTC
   investigating
   Our security-related maintenance is still in progress. We will continue to provide regular updates, with the next update expected within a few hours.
10. Nov 3, 2026, 12:32 UTC
    investigating
    Security maintenance is ongoing. We’ll continue to share regular updates, with the next one expected within the next few hours.
11. Nov 3, 2026, 14:30 UTC
    investigating
    As part of our security-related maintenance work, our Academy training platform may be inaccessible to users. We are continuing our work to bring all systems back to operational and will continue to provide status updates at regular intervals and as new information becomes available.
12. Nov 3, 2026, 17:00 UTC
    investigating
    As part of our security-related maintenance work, our Academy training platform may be inaccessible to users. If any customers are impacted, particularly those undertaking certifications or exams, please rest reassured that we will provide additional time or extend exam deadlines as appropriate We are continuing our work to bring all systems back to operational and will continue to provide status updates at regular intervals and as new information becomes available.
13. Nov 3, 2026, 19:56 UTC
    investigating
    As part of our ongoing security-related maintenance, some functionality in the Customer Admin Portal may be temporarily unavailable. We are continuing our work to restore all systems to normal operation and will provide further updates at regular intervals and as new information becomes available.
14. Nov 3, 2026, 23:05 UTC
    investigating
    The previously affected functionality in the Customer Admin Portal has been restored. Our security-related maintenance remains ongoing as we continue working to restore all systems to normal operation. We will provide further updates at regular intervals and as new information becomes available.
15. Nov 4, 2026, 02:17 UTC
    investigating
    Our security-related maintenance remains ongoing as we continue working to restore all systems to normal operation. We will provide further updates at regular intervals and as new information becomes available.
16. Nov 4, 2026, 06:04 UTC
    investigating
    Our security-related maintenance is still in progress as we continue working to restore all systems to normal operation. We will provide further updates at regular intervals and as new information becomes available.
17. Nov 4, 2026, 08:28 UTC
    investigating
    As part of our ongoing security-related maintenance, access to our Knowledge Base is also impacted. We are continuing our work to bring all systems back to operational and will continue to provide status updates at regular intervals and as new information becomes available.
18. Nov 4, 2026, 12:03 UTC
    investigating
    We are continuing our work to bring all systems back to operational and will continue to provide status updates at regular intervals and as new information becomes available. Due to this security-related maintenance, access to our Knowledge Base is also impacted.
19. Nov 4, 2026, 15:10 UTC
    investigating
    Due to ongoing security-related maintenance, users currently do not have access to KYT and Address Screening. We are continuing our work to bring all systems back to operational and will continue to provide status updates at regular intervals and as new information becomes available
20. Nov 4, 2026, 15:22 UTC
    investigating
    We have been actively monitoring our transaction screening products for suspicious activity. Due to abnormal activity, we have taken KYT (the user interface and API) offline alongside other address screening products and the login page. Reactor, Data Solutions, and Chain (Beta) are still offline while our team completes critical work. We are working to bring all of our products online as soon as possible.
21. Nov 4, 2026, 16:51 UTC
    investigating
    Due to ongoing precautionary security-related maintenance, users currently do not have access to our Hexagate product. Users currently do not have access to the Hexagate frontend, the API, and GateSigner. Monitoring and alert delivery is still operating as normal. We are continuing our work to bring all systems back to operational and will continue to provide status updates at regular intervals and as new information becomes available
22. Nov 4, 2026, 17:35 UTC
    investigating
    The Hexagate API, GateSigner, and Frontend are now available. Out of an abundance of caution, all customer API keys have been invalidated and will need to be rotated via the Hexagate UI. This is a precautionary measure and there is no evidence that API keys were exposed. Logging into Hexagate via app.chainalysis.com has been disabled. Logging into Hexagate via app.hexagate.com is still working as expected. We are continuing our work to bring all systems back to operational and will continue to provide status updates at regular intervals and as new information becomes available
23. Nov 5, 2026, 00:17 UTC
    investigating
    We are continuing our work to bring all systems back to operational and will continue to provide status updates at regular intervals and as new information becomes available.
24. Nov 5, 2026, 04:12 UTC
    investigating
    We are continuing our work to bring all systems back to operational and will continue to provide status updates at regular intervals and as new information becomes available.
25. Nov 5, 2026, 09:21 UTC
    investigating
    We are continuing our work to bring all systems back to operational and will continue to provide status updates at regular intervals and as new information becomes available.
26. Nov 5, 2026, 11:47 UTC
    investigating
    We are continuing our work to bring all systems back to operational and will continue to provide status updates at regular intervals and as new information becomes available.
27. Nov 5, 2026, 17:09 UTC
    investigating
    We are continuing our work to bring all systems back to operational and will continue to provide status updates at regular intervals and as new information becomes available.
28. Nov 5, 2026, 20:38 UTC
    investigating
    We are continuing our work to bring all systems back to operational and will continue to provide status updates at regular intervals and as new information becomes available.
29. Nov 5, 2026, 23:56 UTC
    investigating
    We are continuing our work to bring all systems back to operational and will continue to provide status updates at regular intervals and as new information becomes available.
30. Nov 6, 2026, 03:04 UTC
    investigating
    We are continuing our work to bring all systems back to operational and will continue to provide status updates at regular intervals and as new information becomes available.
31. Nov 6, 2026, 06:41 UTC
    investigating
    We are continuing our work to bring all systems back to operational and will continue to provide status updates at regular intervals and as new information becomes available.
32. Nov 6, 2026, 09:44 UTC
    investigating
    We are continuing our work to bring all systems back to operational and will continue to provide status updates at regular intervals and as new information becomes available.
33. Nov 6, 2026, 12:10 UTC
    investigating
    We have started phasing customers back onto KYT and address screening. As we do this, we are continuing our efforts to restore all systems to operation. We will provide status updates at regular intervals and as new information becomes available. For more details about the incident and maintenance, please refer to our latest blog post: https://www.chainalysis.com/blog/security-incident-october-30/
34. Nov 6, 2026, 16:01 UTC
    investigating
    We are continuing to bring customers onto KYT and address screening. This is an active process and we continue to make great progress. We continue to appreciate your patience during this process. We will provide regular updates throughout the day as more information becomes available. Thank you

Updates as published by Chainalysis (original).