Country visual unavailable
No information
Opentensor software supply-chain compromise forces Bittensor transaction halt
Attackers used compromised access to OPENTENSOR FOUNDATION's PyPI distribution channel to publish a malicious version of the legitimate Bittensor package. Users who installed the malicious package exposed wallet private keys, enabling theft from affected wallets. After detecting abnormal transfers on 02/07/2024, Opentensor placed the Bittensor chain into safe mode and stopped transactions while investigating and remediating the compromised package. Normal transaction processing resumed after an extended safe-mode period.
78
Estimated severity
78 / 100
86
Source reliability
86 / 100
Approximate Date
02/07/2024
Targeted Company
OPENTENSOR FOUNDATION
Targeted Company Supply Chain Impact
Distribution & Fulfillment
Procurement & Sourcing
Production & Manufacturing
Sales (Retail & Ecommerce)
Warehousing
Service Delivery
Unrecognized Impact
Supply Chain Relations
No information
Geographic Impact
Country Targeted Company
Other Affected Countries
No other affected countries reported
Target country
No information
Affected countries
No information
Impacted regions
No information
Operational Impact
Duration
10 days
Financial impact (USD M)
No information
Impact types
Service unavailabilitySupply chain data integrity impact
Affected sectors
Technology & IT Services
Affected departments
Information Technology
Attack Profile
Attack types
Software supply chain compromiseUnauthorized accessData exfiltration
Attributed threat actors
No information
Sources
Incident Sources
govinfo.govhttps://www.govinfo.gov/content/pkg/USCOURTS-caed-2_25-cv-00380/pdf/USCOURTS-caed-2_25-cv-00380-1.pdftheblock.cohttps://www.theblock.co/news/regulation/2024-07-04-bittensor-exploit-303547manifold.inchttps://www.manifold.inc/releases/bittensor-pypi-hacktheblock.cohttps://www.theblock.co/news/ecosystems/2024-07-02-bittensor-halts-network-after-reported-security-attack-on-wallets-zachxbt-303235