Incident Library

Organisation

Unnamed cryptocurrency exchange

Unnamed cryptocurrency exchange · unnamed-cryptocurrency-exchange

1 case · 2026

Root cause Credential exposure
Component Kubernetes API serverRBAC and service accounts
Contributing factor Excessive blast radius
Symptom Unauthorised access or a foreign workload

Cases

  1. IL-0069 Attackers stole a high-privilege service account token from a production Kubernetes cluster and used it to reach a cryptocurrency exchange's financial systemsUnnamed cryptocurrency exchange · 2026

    Root cause Credential exposure