NEAR AI shuts down unauthorized system access after attacker exposes user data
NEAR AI paused its cloud inference service and shut off unauthorized access to its internal systems after an attacker exploited an inference engine vulnerability on November 8, downloading account details for roughly 100 users.
NEAR AI paused its cloud inference service as a precaution after discovering unauthorized access to its internal systems, confirming that the breach was contained while its investigation proceeded. The company stated that NEAR Protocol and its broader ecosystem of services were not impacted by the incident.[1][3][4][5]
According to disclosures reported by Crypto Banter, an attacker exploited a vulnerability in the server-side inference engine on November 8 to breach parts of the platform's infrastructure. An internal investigation revealed that the intruder downloaded account details for approximately 100 users and accessed 18 agents hosted on a legacy deployment.[2]
NEAR AI closed the unauthorized access, patched the vulnerability, and contacted affected users directly. The company reported finding no evidence that uploaded files or stored Private Chat conversations were accessed, noting that inference on NEAR AI Cloud operates within hardware-isolated secure enclaves designed to safeguard customer prompts.[2][5]
Key facts
- An attacker breached part of NEAR AI's infrastructure on November 8 by exploiting a vulnerability in its server inference engine.
- The intruder downloaded account information for about 100 users and accessed 18 agents on a legacy deployment.
- NEAR AI paused NEAR AI Cloud inference as a precaution while investigating the intrusion.
- NEAR AI shut off the unauthorized access, resolved the issue, and contacted affected users.
- Investigators found no evidence that stored Private Chat conversations or uploaded files were compromised.
- NEAR Protocol and other NEAR services were not affected by the incident.
Sources 路 5 sources
- CO
Cointelegraph@CointelegraphPost on X 路
馃毃 ALERT: NEAR AI says it has shut off unauthorized access to its internal systems, though NEAR AI Cloud stays paused while it wraps up an investigation. It confirms NEAR Protocol and other NEAR services are unaffected. https://t.co/lvEolwIYIX
Open source - CB
Crypto Banter@crypto_banterPost on X 路
馃毃NEAR AI HIT BY VULNERABILITY THAT EXPOSED USER DATA! @near_ai said an attacker used a vulnerability in the inference engine running on its servers to access part of its infrastructure on November 8. The company closed the access, fixed the issue, and contacted affected users. Its investigation found the attacker downloaded account details for approximately 100 users and reached 18 agents on a legacy deployment, while finding no evidence that stored Private Chat conversations or uploaded files were accessed.
Open source - TB
The Block@TheBlockCoPost on X 路
THE BLOCK: NEAR AI said it has recently identified unauthorized access to its internal systems and paused NEAR AI Cloud inference as a precaution. "NEAR Protocol and other NEAR services are not affected," NEAR AI said. near:native https://t.co/qhrKdDoTNI
Open source - CN
crypto.news@cryptodotnewsPost on X 路
NEW: NEAR AI shuts down unauthorized access to its internal systems NEAR AI Cloud remains paused as the investigation continues, while NEAR Protocol and other NEAR services remain unaffected. https://t.co/cpR2YJshsU
Open source - DN
DEGEN NEWS@DegenerateNewsPost on X 路
NEW: @near_ai PAUSES ITS NEAR AI CLOUD INFERENCE AFTER IDENTIFYING "UNAUTHORIZED ACCESS" TO ITS INTERNAL SYSTEMS https://t.co/Q9trbwn4fG
Open source