Chainalysis Starts Reopening Compliance Tools Behind IP Allowlists in Sixth Breach Update

Brief

By Dextape Desk · November 6, 2026

Chainalysis began bringing back its KYT monitoring and Address Screening products on Friday, admitting customer groups in stages. The step follows a Wednesday-night disclosure that hashed passwords and live tokens tied to every account were reached by an attacker. Customers must first send trusted IP addresses for allowlisting. After access, each user must reset their password and, where relevant, rotate API keys before registering transactions. Reactor and Data Solutions remain down while outside security experts strengthen the systems. The company has not said how many customers exist or how many KYT accounts were accessed without permission. The update leaves live tokens undefined and gives no return date for the two offline products. Chainalysis also reported no evidence that investigations data was reached.

Why it matters: Because the exposure reaches every account and the affected scope is unclear, compliance teams face a staged return to tools they rely on for transaction monitoring.

Summary by Dextape, based on reporting by Unchained. Machine-written from Unchained’s report and checked against it · How Dextape writes