Chainalysis has confirmed that an intruder obtained password hashes and live authentication tokens for all of its users, widening an exposure it had…. The firm, whose software is used by exchanges, banks, regulators and police forces to trace illicit crypto flows, said in a November 4 security update that names, usernames, password hashes and live tokens for all users had been exposed to a malicious actor.