On February 20th, 2025, the Dune web application experienced a 12-minute outage affecting all authenticated users. Users were logged out and unable to log back in.
During the consolidation of authentication systems between Dune and Sim, a code refactoring error was accidentally deployed to production. This caused the API endpoint for user session refreshes to fail.
The incident occurred when code refactoring introduced an undeclared variable in the codebase. Our automated safeguards missed this because the variable was named origin, which exists as a global variable in certain JavaScript contexts.
We restored service by rolling back the API to its previous version, which restored login functionality.
We have implemented additional tests to prevent similar issues in the future.