The Service Portal has been brought back online. We have reviewed our system and security posture, and we continue to actively monitor our infrastructure to ensure stability and security.
Posted Dec 14, 2025 - 14:07 UTC
Update
Based on a detailed review of application and system logs, we found no evidence that the website’s source code was modified or that user data was accessed or altered. The activity was limited to the runtime of the affected container and resulted primarily in service instability. We will clean the environment and deploy the services back again
Posted Dec 12, 2025 - 12:23 UTC
Identified
We identified a security issue affecting the Portal, caused by a known vulnerability in Next.js (https://github.com/advisories/GHSA-9qr9-h5gf-34mp). As a precaution, the Portal has been temporarily shut down and is no longer accessible. We have not identified any direct user impact.
Posted Dec 12, 2025 - 08:15 UTC
Investigating
We are investigating a potential security incident in our AWS infrastructure and have therefore taken Lisk Portal offline out of caution.
Note that we have not received any reports of any malicious activity related to the Lisk Portal so far.