Summary

  • Allium confirmed unauthorized access to its systems on October 25 2026 and revoked API keys as a precaution.
  • Partial service restorations occurred across 18 chains for clients including Visa and Coinbase between October 28 and 30.
  • The incident coincides with the October 27 launch of CF Benchmarks CFB Oracle on Ethereum mainnet and HyperEVM.

Allium spotted unauthorized access on October 25 2026. It revoked the API keys at once and launched an investigation. Services for Visa and Coinbase went down.

The breach highlighted risks in centralized oracles. These systems supply price feeds to major apps.

"Allium confirms unauthorized access to its systems on Oct 25 2026."

, Allium (crypto.news)

Context

Allium delivers indexed data across 18 chains. Big clients count on it for trading and compliance. One outage spreads fast.

The timing matched a new launch from CF Benchmarks. CFB Oracle pushes signed indices straight onchain. This move signals demand for verifiable alternatives.

Details

Allium detected the breach on October 25. It yanked the old keys immediately. Users must create fresh ones now. The company still probes how far the access went.

Restoration rolled out in stages. Core services returned on October 28 and the days after. Clients apply the new credentials to regain full access.

The overlap with CFB Oracle's October 27 launch stands out. That tool runs on Ethereum mainnet and HyperEVM. It gives apps signed data without the same infrastructure.

Social Highlight · @allium · 2026-10-28

Allium services partially restored after breach. (https://x.com/allium/status/123)

Firms track these oracle risks closely. They rely on the feeds for Visa and Coinbase work. Better credential controls will matter most.

The investigation continues. Allium has not issued a final report on exposed data.