Unauthorized Access Incident at Allium: Systems Briefly Compromised
On October 29, Ethan Chan, Co-founder and CEO of Allium, publicly addressed a security incident first detected on October 25. The event involved unauthorized access to certain internal systems. Upon discovery, Allium's team swiftly implemented containment protocols to secure the infrastructure and limit potential exposure.
Immediate Response and User Notification
According to the statement, affected customers were directly notified following the incident. Allium continues to provide updates and support through dedicated channels. The company has also engaged an independent cybersecurity firm to assist with the investigation and response efforts.
The ongoing investigation is focusing on reinforcing security controls, particularly around authentication and monitoring systems. Chan indicated that a summary of the findings and remedial actions will be shared with the community once the review is complete.
Core Platform Restoration Update
Allium confirmed that its core platform—including the main application, block explorer, and explorer APIs—is now back online. However, some functionalities remain temporarily limited as restoration work continues.
Users are advised to check the official status page for the latest availability information and updates. Chan apologized for the disruption caused by the incident and emphasized that clear communication and ongoing follow-through are essential to maintaining customer trust.
- Timeline: Detected October 25, disclosed October 29
- Actions Taken: System isolation, user notifications, third-party security support enlisted
- Current Status: Core platform operational, partial functionality being restored
- Next Steps: Investigation summary to be released, authentication and monitoring enhancements planned