Yesterday, we detected an attack on Origami Tech's infrastructure.

The affected systems were promptly isolated, the vulnerability was addressed, and the relevant credentials and secrets were rotated. The protected security layer containing users’ private keys was not compromised. Users’ private keys remain secure.

However, some data may have been affected during the incident.

As an additional security measure, we are resetting all user passwords and 2FA settings. Users will need to set a new password using the Forgot Password option on the login page and set up 2FA again after logging in.

We also recommend rotating the exchange API keys connected to Origami Tech as an additional precaution.

The incident has been contained, and we are continuing our internal review. We will provide additional updates as our review progresses.