On October 25, Allium acknowledged that unauthorized access occurred within parts of its infrastructure, a development that led to the cancellation of certain API keys and temporary outages. To address the situation, the organization engaged an outside cybersecurity expert to examine the incident.
Following multiple days of downtime, the organization brought back online its main application and Explorer APIs, though restoring some data sets involved filling in missing information while the Allium Assistant and its MCP service stayed offline throughout the repair process. In addition to revoking current API keys and advising clients to update passwords and enable multifactor authentication, the firm noted that it secured $40 million in Series B capital during June.
Unauthorized Access Confirmed and Systems Restored
Ethan Chan, the chief executive and co-founder of Allium, confirmed that access was limited following the detection of an intrusion. The firm informed impacted clients and engaged a third-party cybersecurity group to examine the situation. While the primary application and Explorer APIs have been brought back online, certain functionalities are still out of service.
Public records from the company show that its Explorer stopped working on October 25, with restoration work persisting until October 28. On October 26, Allium shut down its application temporarily as a safety measure while employees worked to regain access. To date, the organization has failed to pinpoint the intruder, describe the method of unauthorized entry, or reveal if client data was taken.
On October 25, Allium identified a security incident involving unauthorized access to certain systems and immediately took steps to restrict access and secure its infrastructure. The company notified affected customers directly and continued to provide updates and support while engaging external parties.
Following the restoration of the Explorer and its linked APIs on October 28, users encountered new security mandates prior to full operation. The system invalidated current API keys, directing clients to create fresh ones within the app or request updated credentials from their Allium representatives.
Following the security incident identified on October 25, a notification issued on October 26 revealed that datashare tables in various regions stopped accepting new information. Consequently, users attempting to query these tables received outdated data or error messages until service restoration occurred. The organization advised clients to change their passwords and activate multifactor authentication measures. During this period, retrieving earlier uploaded datasets and submitting fresh data were both blocked, which halted any queries dependent on those specific tables.
This event overlapped with outages affecting Allium's data delivery infrastructure, a system that provides blockchain details to enterprise clients utilizing environments like Snowflake, Databricks, and Google BigQuery. A recovery statement released on October 28 confirmed that the Allium Assistant and Model Context Protocol service remained offline. These conditions persisted alongside the earlier-imposed limitations on uploading new files and querying designated tables.
Following the resumption of data distribution across its three warehouse platforms, Allium reported that it continued verifying missing records and backfilling information from the affected period. By October 28, the company stated that datasets for Ethereum, Bitcoin, Solana, and Base hosted on Snowflake and Databricks were undergoing freshness and completeness verification, while backfilling operations persisted for other chains and impacted BigQuery records.
Established in 2021, Allium focuses on gathering, structuring, and examining blockchain transactions for institutional clients to transform raw onchain activity into organized datasets for financial research and commercial use. It is vital to differentiate between fixing an API endpoint and finishing historical data corrections for users relying on blockchain information for studies or accounting, since a functioning endpoint does not ensure that all tables hold a full history of transactions while the system was down.
Visa partners with Allium to operate its Onchain Analytics Dashboard, an instrument built to categorize stablecoin transactions and separate payment flows from trading, transfers, and other blockchain activities. During an October review of stablecoin payment activity, the report referenced Allium research projecting payments between $401 billion and $527 billion through August 2026, a range that varies based on the classification approach applied to the data.
Beyond payment analysis, Allium datasets supported an October study on Solana validator distribution to map the geographic spread of staked SOL alongside other sources. The security disclosure regarding the breach does not confirm that Visa, Stripe, or Coinbase experienced unauthorized access to their internal systems, and while Allium stated it notified affected customers directly, the specific identities of those recipients remain unidentified.
Data Backfilling and Feature Limitations Persist
Following a $40 million Series B fundraising announcement made in June, which was led by Amplify Partners with participation from Kleiner Perkins and Theory Ventures, Allium reported that its technology supported data operations across more than 150 blockchains. This recent capital injection follows the company's previous Series A round completed in 2024, during which it raised $16.5 million to develop enterprise blockchain infrastructure.
Chan, a company representative, indicated that authentication and monitoring controls are being reinforced while the investigation moves forward. He voiced regret regarding the service interruptions affecting customers and mentioned that Allium plans to share its findings and corrective steps after the inquiry ends. No specific release date for this report has been announced by the firm, yet ongoing status notices monitor progress on restoring features, verifying data, and repairing affected records.