Railway Hack Explained: How a Platform Breach Led to $371,000 in Crypto Theft

TLDR Railway disclosed a security breach on October 21 that may have exposed customer environment variables holding API keys and passwords. Researcher Taylor Monahan linked about $371,000 in crypto theft to the incident, across more than 500 transactions on at least 19 EVM chains. Her timeline places the first known theft at 19:36 UTC, more than two hours before Railway went public. Railway paused deployments and told all customers to replace their stored credentials. Railway has not confirmed the crypto losses or said whether blockchain private keys were exposed.