Vercel's April 19 disclosure of unauthorized access through compromised Context.ai OAuth tokens is now seventeen days old. [1] What the company has not produced in those seventeen days is the architecture: no published OAuth-scope review, no token-storage policy change committed to a date, no third-party SaaS audit, no federal procurement response. The May 5 paper read Day 16 of silence as the procurement architecture. Day 17 lands the silence inside a different week.
The week is the Anthropic civilian-agency EO table-reads window. The paper has tracked Australia's AI Biosecurity Office at Day 10 against U.S. federal silence at Day 7, with the National Science Board disbanded — removing the body that would have requested an interagency review. The Vercel disclosure originated with a Lumma Stealer infection at Context.ai in February, traced to a Roblox cheat download; ShinyHunters listed the data on BreachForums for $2 million on April 19. [2] The lateral-movement chain — OAuth token from a small AI tool to enterprise Google Workspace to Vercel internal environments to non-sensitive environment variables — is documented. The procurement question that follows from the chain is whether federal agencies running Vercel-deployed services have an OAuth-scope inventory, and the federal answer is silence.
That silence is now operating fact. Trend Micro, VentureBeat, and SpecterOps have framed the case in the same terms: the OAuth attack path the Vercel breach demonstrates is exactly the pattern current procurement reviews cannot detect, scope, or contain. [3][4] The Hacker News labeled it "an OAuth supply-chain attack in the AI era." Gergely Orosz's X post translated the lesson for procurement teams: every SaaS tool that needs broad data access is its own security risk that must be onboarded with vendor diligence. [5] Day 17 of federal silence on the specific scopes Context.ai held against Vercel's internal systems — and on whether agencies running on Vercel are exposed to the same architecture — turns the breach into the procurement default.
A pattern that holds for seventeen days without answer is no longer an outlier. It is the architecture.
-- THEO KAPLAN, San Francisco