Railway urged all customers to replace their stored secrets immediately after disclosing on October 21 that an attacker may have accessed encrypted environment variables and read some of their contents. These variables could contain API keys, database credentials and private registry credentials. On-chain investigator @tayvano_ alleged that roughly $371,000 in cryptocurrency had been stolen across at least 19 EVM-compatible chains, while Railway has not confirmed the link or the amount. Railway invalidated its own API tokens, restored builds for Pro and Enterprise workspaces and also continued working to restore access for lower tiers, while advising customers to review their logs and rotate potentially exposed credentials.
Source: Read the original article
