hack or exploit

Allium Discloses Security Breach, Revokes API Keys

0Importance
closedStatus
3News media
3Pieces
Published
Updated
Since then
2 new reports

Allium said its datashares on Snowflake, BigQuery and Databricks passed historical verification checks across all chains and all regions, while its datashare incident still showed as open on its status page. The company had earlier disclosed unauthorized access, revoked API keys, and restored core services, but uploaded-data access remained disabled and some feeds were still being repaired.

Key claims & sources

✓
Core services were restored after the incident, while access to uploaded data remained disabled.
✓
Allium confirmed unauthorized access to its systems and revoked API keys while it investigated the breach.
✓
Allium detected a security incident on Oct. 25 and later disclosed it on Oct. 25.
✓
Allium said on Friday that its datashares on Snowflake, BigQuery and Databricks passed historical verification checks for all chains across all regions.

What it means

Allium sits in the middle of the infrastructure stack that crypto companies use to move and verify blockchain data. When that layer has an incident, the impact is not only on one company’s dashboard but on the data pipes that feed exchanges, payment firms, and analytics tools. The timeline here matters because the breach was detected first, then disclosed, and then followed by checks and restoration work.

For firms that rely on Allium, restored core services mean some operations can resume, but disabled uploaded-data access and ongoing feed repairs leave parts of the workflow incomplete. That is a practical constraint for teams that depend on fresh data, reconciliations, or internal reporting built on those feeds. Visa, Stripe, and Coinbase being named among affected users shows how far that dependency reaches.

Crypto data providers are expected to deliver continuous access and trustworthy records, so a security incident at this layer creates a tension between speed of recovery and confidence in the data. Allium’s verification checks point to a cleanup process, while the open incident status shows that operational recovery and formal closure are not the same thing. This is part of a larger trade-off in crypto infrastructure: the more centralized and widely used a data service becomes, the more disruption can spread when it has to lock down access. (per thedefiant.io)

What is still open is the exact scope of the unauthorized access, which systems were touched, and whether the remaining feed gaps are fully repaired. Allium’s status page still matters here because it is the clearest marker of whether the company considers the incident resolved. The next update that would settle the picture is a formal closeout showing that the datashare issue is no longer open and that all feeds are back to normal.

Market reaction i

Total crypto marketall crypto assets combined no single asset in the event: read against the whole market
first headline
-1.1% 2 h before
-0.1% 4 h after
$2.7Tmarket cap at publication
12data points

The move was larger before the first headline than after. That is an observation, not an explanation: the market also moves on things nobody publishes.

Coverage timeline

Every piece in order, with the time its news medium declares — if it is not believable we use ours and say so — and what it added to what was already known at that point. Arriving first is not the same as adding something.

first
Oct 29 01:52
The Defiant scoop
Breaks the event
+2 h 42 m
Oct 29 04:34
crypto.news echo
No new facts: investigates, restores, confirms
+1 d 19 h
Oct 30 21:45
Unchained context
Its angle: verification, unavailable, timestamps; with quotes

Other recent incidents

WhenWhat happenedFigure
1 days ago Loopscale Lending · Unknown incident no figure in dollars
1 days ago TENDRIL · Swap Logic Flaw incident $550k
1 days ago $TENDRIL · Smart contract vulnerability incident $555k
3 days ago InsurancePool/CoreVault · Flash loan attack incident $112.3k
4 days ago Solana MEV Bot King · Hot wallet key compromise incident $856k

4280 incidents stored