MapleStory Universe confirms intrusion into off-chain servers and pauses its OpenAPI
MapleStory Universe says an external party accessed part of its off-chain server infrastructure. The game, marketplace and other listed services returned on November 12 UTC, while OpenAPI maintenance continued.
- Disclosed
- Nov 12, 2026
- Public disclosure date
- Severity
- Septic Tank Blew
- No CVE: a breach, not a bug
- Splash zone
- MapleStory Universe players and developers whose apps use its OpenAPI.
- crypto
- In the wild
- Yes
- MapleStory Universe confirms unauthorized external access to its off-chain servers.
What happened
MapleStory Universe disclosed an intrusion into its off-chain infrastructure. The official service notice gives separate recovery status for OpenAPI and the rest of the listed services. The incident notice excerpt confirms the server intrusion. The exact entry point, affected user count and any wallet losses remain unverified in the primary material available for this entry.
Crime-scene timeline
Nov 12, 04:05 UTC
MapleStory Universe begins emergency maintenance
The maintenance notice lists the game client, website, marketplace, Builder and OpenAPI among affected services.
Nov 12, 2026
The operator publicly confirms unauthorized access
The incident notice attributes the service maintenance to access to part of its off-chain server infrastructure.
Nov 12, 21:40 UTC
Listed services return except OpenAPI
The operator says OpenAPI maintenance continues and expects service to resume the following week. Check the notice for any revised target.
Who said what
We list each claim and who made it. Primary sources (the vendor, the researcher, the registry) are marked. Where reports disagree, we grade by the worst credible case.
- MapleStory Universe incident notice via X’s public embedPrimaryThe readable opening confirms unauthorized external access to off-chain servers as the reason for maintenance.
- MapleStory Universe maintenance noticePrimaryLists the maintenance window, restored services and the remaining OpenAPI outage.