The company cites agentic attack techniques but has released no evidence measuring the AI's autonomy. It says it has found no evidence of access to investigation content, authentication credentials or session tokens, and rules out a connection with the Binance theft.
The number of affected customers and exploited vulnerabilities remain unknown. Chainalysis recommends two-factor authentication and vigilance over reset requests and messages impersonating the company.