Vercel disclosed a security breach that may have exposed API keys, prompting crypto developers to rotate credentials and audit their systems.
The intrusion was linked to a compromised Google Workspace connection via third-party AI tool Context.ai, allowing attackers to access internal configurations.
API keys, which act as digital credentials connecting apps to services like wallets and databases, were potentially exposed, raising concerns about misuse or impersonation.
Vercel stated that sensitive environment variables are stored securely and there is no evidence they were accessed, though investigations remain ongoing.
The incident has drawn scrutiny due to Vercel’s role in hosting frontend infrastructure for many Web3 applications, including Orca.
Orca confirmed it rotated all credentials as a precaution and said its on-chain protocol and user funds were not affected.
The breach adds to a series of recent crypto-related security incidents, highlighting ongoing risks in both infrastructure and decentralised finance ecosystems.