Pendle confirms it is unaffected by Railway and PHP security incidents
Pendle moved to reassure users that Pendle and @boros_fi are not affected by the recent security incidents and are safe to use, stating it does not run on Railway and none of its services use PHP. The statement was posted on Pendle's official X account and repeated in a follow-up reply.
The clarification comes after Railway, a cloud deployment platform, disclosed that encrypted environment variables containing API keys and database credentials may have been accessed without authorization, and amid separate PHP-related supply-chain concerns. Pendle's message is aimed at differentiating its infrastructure from services that rely on Railway or PHP stacks tensed by those incidents.
- Pendle confirmed the same for Boros, its vault product, hosted at boros.pendle.finance.
- No impact to user funds or protocol functionality was reported.
- The confirmation was shared twice on X, the second a reply with a screenshot of the original post.
Sources
- https://t.co/FpbEyB2yFG Replying to their earlier post: Pendle and @boros_fi are NOT affected by the recent security incidents and are safe to use. We don't run on Railway, and none of our services use PHP.x.com ↗
- Pendle and @boros_fi are NOT affected by the recent security incidents and are safe to use. We don't run on Railway, and none of our services use PHP.x.com ↗
Pendle
Pendle Earn enables you to obtain fixed yield or provide liquidity in a simple interface. Pendle Earn and Trade runs on the same set of contracts with a separate user interface to cater to different audiences.
