Allium Says Historical Checks Passed Across All Chains After Security Incident, While Status Page Remains Open

Allium Says Historical Checks Passed Across All Chains After Security Incident, While Status Page Remains Open

N
News Editor
2026-10-30 21:45:00
Blockchain data provider Allium said Friday that its datashares on Snowflake, BigQuery, and Databricks have passed historical verification checks for every chain in every region, marking the latest step in its repair work after a security incident disclosed earlier this week. Even so, the company’s status page still shows the datashare incident as unresolved, and several questions remain unanswered. Allium said it detected the security incident on Oct. 25 and disclosed it on Oct. 28, when CEO and co-founder Ethan Chan said the company had identified unauthorized access to certain Allium systems. Chan said Allium restricted access, notified affected customers directly, and hired an independent cybersecurity firm. He also said the company plans to publish a summary of its findings and response measures after the investigation ends, but no such summary had appeared as of Friday afternoon. According to Unchained’s reading of status-page timestamps, datashare tables across all regions went without new data for just under 24 hours, while the Allium App was unavailable for about 61 hours. When Explorer and the Explorer API came back online on Oct. 28, Allium revoked existing API keys as a precaution, asked customers to generate new keys or wait for replacements, required password resets at sign-in, and suggested enabling multi-factor authentication. Some features, including data uploads, access to previously uploaded data, Allium Assistant, and Allium MCP, were still unavailable or only partially restored as of Friday afternoon.

Blockchain data provider Allium said Friday that its datashares on Snowflake, BigQuery, and Databricks have passed historical verification checks for all chains across all regions. The company described that as the latest step in its data repair work, though the datashare incident was still listed as open on its status page.

Allium said it detected a security incident on Oct. 25 and disclosed it on Oct. 28. In a statement published that day, CEO and co-founder Ethan Chan said the company had found unauthorized access to certain Allium systems.

Allium’s website lists Visa, KPMG, and Coinbase among the companies that use its onchain data.

Datashare and app disruptions

By Unchained’s count based on status-page timestamps, datashare tables in every region went without new data for just under 24 hours. The gap ran from a notice posted at 6:09 p.m. EDT on Oct. 26 to an update at 6 p.m. EDT on Oct. 27 saying delivery had resumed.

The Allium App was unavailable for about 61 hours. The status page first reported the Explorer down at 7:31 p.m. EDT on Oct. 25, said the next morning that the app had been taken offline as a precaution, and later said the Explorer was back online at 9 a.m. EDT on Oct. 28.

What Allium has not disclosed

Chan’s statement did not explain how the unauthorized access happened, who was responsible, what data was reached, or whether customer data or API keys were taken.

Allium also has not said how many customers were affected or whether the datashare outage was connected to the security incident.

Chan said Allium moved to restrict access, notified affected customers directly, and brought in an independent cybersecurity firm. He wrote that once the investigation is complete, the company plans to share a summary of its findings and the measures taken in response. As of Friday afternoon, no such summary had been posted.

API keys revoked, some functions still unavailable

When Allium restored its Explorer and Explorer API on Oct. 28, it revoked existing API keys as a precaution. Customers were told to generate a new key in the app or wait for one from their Allium contact, reset their password at sign-in, and consider enabling multi-factor authentication.

The same update said uploading new data and opening previously uploaded data had been temporarily disabled, meaning queries that touched those tables would not run.

Allium also said Allium Assistant and Allium MCP were not yet available. As of Friday afternoon, the status page had not announced the return of any of those features and still listed the Allium App, Explorer UI, and Explorer Queries as being in partial outage.

Chan wrote that the company is focused on strengthening its security controls, including authentication and monitoring.

This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan.
400

Disclaimer:

The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.

Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.