CVE-2026-102490

Blockchain infrastructure provider Chainstack disclosed a breach in which an unauthorized actor gained access to parts of its production systems via a third-party component, leading to exposure of customer data and password hashes. The attack is linked to a broader AI-powered campaign attributed to a China-linked threat cluster using the ARTEX framework. The attacker accessed a development environment on October 26, 2026, escalated privileges, and moved into production systems before being detected and blocked on October 31, 2026. Customers are advised to rotate node credentials, regenerate API keys, and update passwords due to potential reuse.