Moneycontrol PRO
LAMF
LAMF

Cloudflare explains why Zerodha, Groww and other Indian trading apps suffered outage

Cloudflare has confirmed that an internal change to its Web Application Firewall triggered a short but noticeable outage this morning, affecting a number of high-traffic services including Indian trading platforms Zerodha, Groww and others.
December 05, 2025 / 19:20 IST

Cloudflare has confirmed that an internal change to its Web Application Firewall triggered a short but noticeable outage this morning, affecting a number of high-traffic services including Indian trading platforms Zerodha, Groww and others. The issue began around 8:47 GMT and was resolved by roughly 9:13 GMT, leaving users unable to load apps or execute trades during the window.

In a statement shared with Moneycontrol, Cloudflare said the problem stemmed from an adjustment made to the way its WAF parses requests. The change was pushed out to help mitigate a newly disclosed industry-wide vulnerability linked to React Server Components. While the fix was well-intentioned, it inadvertently led to availability issues across segments of Cloudflare’s global network.

Importantly, the company stressed that this was not an attack or a security incident. The snag was entirely the result of a configuration update rolled out by its own engineering team. Cloudflare has said it will publish a full technical explanation in a blog post later today.

For users of trading apps, the timing understandably caused frustration. Several brokerage platforms rely on Cloudflare for routing and security, meaning even a brief disruption ripples out instantly. Zerodha and Groww users took to social platforms to report login failures, chart loading issues and delayed order placements. Because the outage ended within 12 minutes, markets were not meaningfully affected, but the event still underscored how dependent fintech infrastructure is on upstream networks.

Here’s Cloudflare’s statement in full:

A change made to how Cloudflare's Web Application Firewall parses requests impacted the availability of Cloudflare's network at approximately 8:47 GMT and concluded approximately 9:13 GMT. This was not an attack; the change was deployed by our team to help mitigate the industry-wide vulnerability disclosed this week in React Server Components. We will share full details in a blog post today.

Invite your friends and family to sign up for MC Tech 3, our daily newsletter that breaks down the biggest tech and startup stories of the day

Sarthak Singh Sarthak is an experienced writer having covered personal and consumer tech, gadgets news, social media trends, and more for several years

Discover the latest Business News, Sensex, and Nifty updates. Obtain Personal Finance insights, tax queries, and expert opinions on Moneycontrol or download the Moneycontrol App to stay updated!

Subscribe to Tech Newsletters

  • On Saturdays

    Find the best of Al News in one place, specially curated for you every weekend.

  • Daily-Weekdays

    Stay on top of the latest tech trends and biggest startup news.

Advisory Alert:

It has come to our attention that certain individuals are representing themselves as affiliates of Moneycontrol and soliciting funds on the false promise of assured returns on their investments. We wish to reiterate that Moneycontrol does not solicit funds from investors and neither does it promise any assured returns. In case you are approached by anyone making such claims, please write to us at grievanceofficer@nw18.com or call on 02268882347