Security Incident
Phala Cloud API endpoint vulnerability
A vulnerability in the Phala Cloud API endpoint allowed unauthorized modifications to some Offchain KMS CVMs.
- Reported loss
- 0
- Attack category
- API endpoint vulnerability
Incident Overview
The attacker deployed a malicious pre-launch script to affected CVMs, which may have accessed decrypted environment variables after boot. The issue was identified, patched, and contained on June 1, 2026. Affected users/CVMs have been directly notified via email.
Sources & References
This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.