Opentensor Foundation said a malicious PyPi package triggered a Bittensor security breach affecting some users. The team detected unusual transfers, enabled safe mode, and said it contained the attack within 35 minutes while continuing its investigation.
On July 2, a malicious PyPi package stole unencrypted coldkeys from Bittensor users. The Opentensor Foundation activated safe mode within 35 minutes, halted transactions, and placed validators behind firewalls. Users of version 6.12.2 who staked or transferred are advised to regenerate keys.
Opentensor Foundation said it contained a Bittensor security incident after a malicious PyPi package exposed some users’ unencrypted coldkey details. The team activated safe mode, halted transactions, and said affected users likely include those on version 6.12.2 who performed staking or token transfers.
