Hack history / 2026 / Hack or exploit
Phala Cloud
Hack or exploit on May 31, 2026 · API endpoint vulnerability
ONE SOURCE · 1 SOURCE
Lost
undisclosed
dollars at the time
Returned
none listed
as the sources state it
Rank
not ranked
collapses, frauds and later news are not ranked
What happened
A vulnerability in the Phala Cloud API endpoint allowed unauthorized modifications to some Offchain KMS CVMs. The attacker deployed a malicious pre-launch script to affected CVMs, which may have accessed decrypted environment variables after boot. The issue was identified, patched, and contained on June 1, 2026. Affected users/CVMs have been directly notified via email.
Details
- Date
- May 31, 2026
- Kind
- Hack or exploit
- Method
- API endpoint vulnerability
- How in
- Smart contract bug
- Target
- not stated
- Chains
- not stated
Reported by
Related incidents
Cloud AI 2024 · Hack or exploit · $360K
Coin Cloud crypto ATM operator files for bankruptcy 2023 · Collapse or insolvency · $123.6M
Domestic cloud server 2020 · Hack or exploit · undisclosed
Coin Cloud crypto ATM operator files for bankruptcy 2023 · Collapse or insolvency · $123.6M
Domestic cloud server 2020 · Hack or exploit · undisclosed
Cite this page
SwanBluechip, "Phala Cloud hack, May 31, 2026: undisclosed lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht7d04845056/ (data as of 2026-10-31).