Resolved -
This incident has been resolved.
Dec 19, 15:29 UTC
Monitoring -
The Service Portal has been brought back online.
We have reviewed our system and security posture, and we continue to actively monitor our infrastructure to ensure stability and security.
Dec 14, 14:07 UTC
Update -
Based on a detailed review of application and system logs, we found no evidence that the website’s source code was modified or that user data was accessed or altered. The activity was limited to the runtime of the affected container and resulted primarily in service instability.
We will clean the environment and deploy the services back again
Dec 12, 12:23 UTC
Identified -
We identified a security issue affecting the Portal, caused by a known vulnerability in Next.js (https://github.com/advisories/GHSA-9qr9-h5gf-34mp). As a precaution, the Portal has been temporarily shut down and is no longer accessible.
We have not identified any direct user impact.
Dec 12, 08:15 UTC
Investigating -
We are investigating a potential security incident in our AWS infrastructure and have therefore taken Lisk Portal offline out of caution.
Note that we have not received any reports of any malicious activity related to the Lisk Portal so far.
Dec 12, 01:36 UTC