Gate News message, April 20 — Cloud development platform Vercel confirmed a security incident on Sunday (April 19) in which hackers gained access to internal systems, stealing employee data, customer data, and sensitive credentials. The breach poses a significant risk to the Web3 ecosystem, as many crypto projects use Vercel to host their front-end interfaces.
Vercel’s investigation revealed the breach originated from a third-party AI tool called Context.ai, which was being used by one of its employees. The tool’s Google Workspace OpenAuth application was compromised, allowing attackers to broaden access to Vercel’s systems and potentially impact hundreds of users across multiple organizations. The platform warned that unprotected environment variables used by deployments could be exposed and recommended users review and change any environment variables not marked as sensitive.
Shortly after Vercel’s announcement, a user calling themselves ‘ShinyHunters’ posted on the cybercrime marketplace Breachforums, claiming to have breached Vercel and offering to sell stolen data—including access keys, source code, database data, and API keys—for $2 million. The attacker also shared personal information on Vercel employees and screenshots of internal dashboards. In separate Telegram messages, the attacker claimed to be in contact with Vercel regarding a $2 million ransom demand.
Vercel CEO Guillermo Rauch confirmed the incident on X, stating that the company had engaged incident response experts and notified law enforcement. Vercel said only a limited subset of customers were impacted and that its services remain fully operational.
Disclaimer: The information on this page may come from third parties and does not represent the views or opinions of Gate. The content displayed on this page is for reference only and does not constitute any financial, investment, or legal advice. Gate does not guarantee the accuracy or completeness of the information and shall not be liable for any losses arising from the use of this information. Virtual asset investments carry high risks and are subject to significant price volatility. You may lose all of your invested principal. Please fully understand the relevant risks and make prudent decisions based on your own financial situation and risk tolerance. For details, please refer to
Disclaimer.
Related Articles
Pay attention to the signed content! Vercel is hit with ransomware demanding $2 million, and crypto protocol frontend security raises a red flag
The cloud development platform Vercel was breached by hackers on April 19. The attackers gained access through a third-party AI tool used by employees and threatened to extort $2 million. Although sensitive data was not accessed, other data may have been used. The incident has raised security concerns in the crypto community, and Vercel is currently investigating while advising users to rotate their keys.
ChainNewsAbmedia31m ago
KelpDAO Loses $290M in Lazarus Group LayerZero Attack
KelpDAO faced a $290 million loss due to a sophisticated security breach linked to the Lazarus Group. The attack exploited configuration weaknesses in their verification system and highlighted the risks of relying on a single-point verification setup. Industry experts emphasize the need for improved security configurations and multi-layer verification to prevent future incidents.
CryptoFrontier1h ago
LayerZero responds to Kelp DAO’s 292 million incident: it indicates that Kelp set up a custom 1-of-1 DVN configuration, and the attacker was North Korea’s Lazarus.
LayerZero issued a statement regarding the $292 million hack suffered by Kelp DAO, accusing Kelp’s self-selected 1-of-1 DVN configuration of making the incident possible. The attacker was the North Korean Lazarus Group. LayerZero emphasized that this incident stems from configuration choices and that it will no longer support this kind of vulnerable setup. In addition, responsibility is still disputed, and no compensation plan has been provided.
ChainNewsAbmedia1h ago
DeFi hackers stole $600 million in April; Kelp DAO and Drift accounted for 95% of the monthly losses
In April 2026, within just 20 days, cryptocurrency protocols suffered losses of more than $606 million due to hacker attacks, becoming the worst single-month loss record since the February 2025 exchange incident in which $1.4 billion in data was leaked. The two attacks by KelpDAO and Drift Protocol accounted for 95% of April’s losses, and 75% of the total $771.8 million losses as of now in 2026.
MarketWhisper1h ago
Ripple CTO: Kelp DAO Exploit Reflects Bridge Security Trade-Offs
David Schwartz, CTO Emeritus at Ripple, analyzed bridge security vulnerabilities following the $292 million Kelp DAO exploit. He noted that providers prioritized convenience over robust security, undermining essential protective features. The Kelp DAO breach stemmed from a private key leak, exacerbated by a simplified security configuration in their LayerZero implementation.
CryptoFrontier4h ago
rsETH LayerZero bridge hacked, Aave and other protocols urgently freeze funds
Kelp DAO’s liquidity re-staking token rsETH was attacked on April 19 by a hacker exploiting a cross-chain message verification vulnerability, resulting in 116,500 rsETH being released to an address controlled by the attacker. Multiple DeFi protocols urgently froze related functions to address potential losses. LayerZero stated that it is actively fixing the vulnerability and will release a post-incident analysis report.
MarketWhisper4h ago
