Rewindex

Changescrates.ioDoS Attack

crates.io: Major incident: DoS Attack

Major incidentmajor (vendor)Changed Detected stspg.io (opens in new tab)
Summary

Summary pending. The diff below shows exactly what changed.

Incident page: the full timeline of updates

What changed

Struck in red is what crates.io removed; blue is what they added. Muted text is unchanged context.

AddedTitle#1
Before: not present
After: DoS Attack
AddedImpact#2
Before: not present
After: major
AddedStatus#3
Before: not present
After: resolved
AddedStart time#4
Before: not present
After: 2026-07-11 14:22 UTC
AddedResolved time#5
Before: not present
After: 2026-07-11 15:42 UTC
AddedAffected components#6
Before: not present
After: crates.io
AddedUpdateinvestigating#7
Before: not present
After: We are experiencing what looks like a coordinated DoS attack against our API servers. We are monitoring the situation and are assessing our reaction. Crate downloads and dependency resolution through the sparse/git index should not be affected.
AddedUpdateinvestigating#8
Before: not present
After: We are continuing to investigate this issue.
AddedUpdatemonitoring#9
Before: not present
After: We have deployed countermeasures and our servers are largely back to normal again. We keep monitoring the situation. If you encounter any issues please let us know!
AddedUpdateresolved#10
Before: not present
After: This incident has been resolved. Big thanks to Fastly for providing their CDN services and their fast response time!

First version of this incident archived by Rewindex. View the live incident (opens in new tab).

History of this incident

Saturday, July 11

1 incident change

All crates.io changescrates.io profileMarkdownJSON