Railway security breach linked to $371,000 crypto theft across 19 chains

Railway has disclosed a security breach that blockchain investigator Taylor Monahan linked to approximately $371,000 in cryptocurrency drains across 19 EVM compatible networks. Summary Railway disclosed a security breach that may have exposed customer environment variables containing sensitive credentials and private keys. Blockchain investigator Taylor Monahan linked the incident to roughly $371,000 in crypto theft involving more than 500 transactions across at least 19 EVM networks. Monahan identified the first known theft transaction at 19:36 UTC on October 21, more than two hours before Railway publicly disclosed the security incident. Railway temporarily suspended deployments and urged all customers to rotate their stored credentials while it investigates the extent of the breach. According to Railway’s October 21 security disclosure, the cloud deployment platform detected unusual activity involving systems used to store customer environment variables, which may contain sensitive information such as API keys, database passwords and private registry credentials. An unauthorized third party may have accessed encrypted variables and obtained the decrypted contents of some of them...