NEAR AI pauses cloud inference after detecting unauthorized access

44Importance
updatingStatus
2News media
Published
Updated

NEAR AI paused its cloud inference service after detecting unauthorized access, and later restored its Cloud service after fixing an SGLang security flaw. The incident involved exposed account data, legacy agents, and customer API keys.

Key claims & sources

✓
NEAR AI paused its cloud inference service after it detected unauthorized access.
✓
The company’s Cloud service was later restored after an SGLang vulnerability exposed account data from about 100 users, 18 legacy agents, and two customer API keys.
✓
The exposure included account data tied to roughly 100 users and 18 legacy agents.

What it means

NEAR AI’s Cloud product sits inside a part of crypto infrastructure where users expect sensitive account and agent data to stay private. A pause in cloud inference followed by a restoration after a security fix shows that access control and service continuity are now central product issues, not back-office details. For builders using NEAR AI tooling, the episode is a reminder that security events can interrupt live services that handle user-facing inference workloads.

The exposure of account data, legacy agents, and customer API keys touches the operational layer that many teams rely on to automate on-chain or off-chain tasks. If those keys or agent records are compromised, users and developers may have to rotate credentials, review permissions, and check what connected systems were reachable. That changes how teams think about trust in hosted AI services, especially when those services are tied to crypto applications that depend on continuous access.

Security incidents at infrastructure providers sit at the intersection of AI hosting and crypto operations, where confidentiality claims have to hold up under real attack conditions. NEAR AI’s case shows the tension between offering managed cloud services and keeping control over sensitive data and keys. It also highlights how one vulnerability in a dependency such as SGLang can become a broader governance and security problem for products built on top of it.

What is still unclear is whether any unauthorized party used the exposed data or keys after the flaw was discovered, and whether any users or customers faced downstream effects beyond the service pause and fix. The next relevant details would be a disclosure of the attack window, any follow-up remediation steps, and whether NEAR AI changed its security procedures or service architecture. Those facts would show how far the incident reached beyond the initial exposure.

Market reaction i

NEAR ProtocolNEAR it is the asset of the company or protocol in the event

NEAR Protocol rose 1.1% in the 4 hours after the first headline, after falling 1.4% in the 2 hours before.

$3.59 price at the headline
-1.4% 2 h before
+1.1% 4 h after
+1.1% 4 h after (so far)
First headline

32 prices, one every 30 minutes · The move was larger before the first headline than after: an observation, not an explanation. The market also moves on things nobody publishes.

Coverage timeline

Every piece in order, with the time its news medium declares — if it is not believable we use ours and say so — and what it added to what was already known at that point. Arriving first is not the same as adding something.

first
Nov 10 03:06
+3 h 59 m
Nov 10 07:05
crypto.news context
Its angle: vulnerability, restores, customer