Chainstack Reports Production Systems Breach Exposing Customer Data and Password Hashes

Blockchain infrastructure provider Chainstack disclosed a security breach where an external attacker leveraged an AI-powered campaign via a third-party component to compromise development and production environments. The intrusion led to the exposure of customer account data, password hashes, and node credentials, echoing similar incidents at WorkOS and Chainalysis. Additionally, the Dutch Institute for Vulnerability Disclosure (DIVD) suffered a related breach stemming from the exploitation of zero-day vulnerabilities (CVE-2026-102489 and CVE-2026-102490) in the Zammad ticketing system.

Source: The Hacker News

How Mangudai Discovers This Issue

Mangudai's port module discovers reachable internet-facing services and matches advertised version banners against known vulnerabilities such as CVE-2026-102489 and CVE-2026-102490 in Zammad.

Continuous Autonomous AuditsMangudai scans target perimeters multiple times daily to catch configuration drift instantly.

Zero-Agent ArchitectureIdentifies exposure angles without requiring local installations or server access.

Check what your own domain exposes

A free scan lists the services, software versions, certificates and headers your domain shows to the internet, so you can see whether a flaw like this could apply to you. It reads what is visible from the outside; it does not confirm that a specific vulnerability can be exploited.

Launch Scan For My Domain