Railway Urges Credential Resets as Tayvano Alleges $371,000 Crypto Theft

Railway urged users to rotate stored credentials as investigator Tayvano estimated about $371,000 in crypto theft involving keys kept on the platform; Railway has not confirmed the theft or a connection to its security incident. Railway disclosed Oct. 21 that an unauthorized party may have accessed encrypted customer environment variables and obtained some decrypted contents. The variables could include API keys, database credentials and private registry credentials. Railway’s initial analysis suggested the exposure might affect a subset of users, but it urged everyone to rotate stored variables and credentials and review service logs.

Source: TokenPost