Vercel Security Breach Forces Crypto Teams to Act Quickly
- A breach at Vercel has led to crypto teams rotating API keys and inspecting their code.
- A post on BreachForums claimed to sell Vercel data for $2 million, including access keys and source code.
- Vercel traced the intrusion to a third-party AI tool, Context.ai, via a compromised Google Workspace connection.
- Decentralized exchange Orca confirmed its frontend is hosted on Vercel and has rotated all deployment credentials as a precaution.
- April has seen significant crypto exploits, including a $292 million exploit of Kelp DAO’s rsETH token and a $285 million attack on Drift protocol.
The security incident at Vercel is critical as it supports many crypto applications, raising concerns over potential data exposure. The investigation continues with law enforcement involvement to determine if any sensitive data was accessed.
With multiple protocols exploited this month, including significant losses of $292 million and $285 million, the situation highlights vulnerabilities in the crypto space.(Source)
