Vercel previously confirmed that unauthorized access to parts of its internal systems stemmed from a third-party AI tool’s OAuth compromise, creating a risk that API keys and credentials for some hosted crypto and DeFi front ends may have been exposed. Orca has now said it rotated all potentially exposed keys and deployment credentials following the incident. According to the team, Orca’s front end is hosted on Vercel, but its onchain protocol and user funds were not affected, and it will continue monitoring the situation and provide updates.