Projects showing "live: false" after bot attack — sites blank but account not soft-blocked

I recently experienced a bot attack on one of my sites that caused a spike in edge requests, pushing me over the 1M Hobby plan limit. I’ve since fixed the issue and deleted the offending projects.

The problem:

  • My remaining live sites are now showing blank

  • When I checked with Vercel support, my projects are showing "live": false — but I didn’t make any changes to cause this

  • My account is not soft-blocked according to the system (softBlock is null)

  • The one-time Hobby unblock tool doesn’t work because the account isn’t technically soft-blocked

What I’ve tried:

  • Deleted the projects that caused the bot traffic

  • Moved two sites to separate Vercel accounts to isolate them

My questions:

  1. Why would my projects show live: false if I didn’t disable them?

  2. Could the edge request spike or deleting projects have triggered this?

  3. How can I get my sites back online?

Any help would be greatly appreciated!

Thank you for bringing this to our attention. To ensure this is investigated with the necessary priority and privacy, please report all security-related concerns, potential exploits, or abuse directly to the Vercel Security Team.

Please submit your report here: Report Abuse On Vercel

Reporting via this official channel is the fastest way to reach our security engineers and ensures that sensitive information is handled in a secure environment rather than a public forum.