Crypto observers cried foul Thursday when reports surfaced on Reddit that MetaMask, the gateway for many to the world of Ethereum, was made inaccessible to users in Venezuela.

The truth of the matter, however, was that Infura, the infrastructure service also owned by Ethereum conglomerate ConsenSys, had imposed new geoblocks Thursday but applied them too broadly, according to a series of tweets.

The mistake had been rectified, Infura said, but not before critics levied claims that the episode revealed a point of failure in what is widely billed as the “uncensorable” internet.

“Infura closely monitors changes to U.S. sanctions programs announced by the Office of Foreign Assets Control and narrowly tailors its internal controls to comply with the law,” a ConsenSys spokesperson told CoinDesk via email. “Currently, those regions are Iran, North Korea, Cuba, Syria, and the Crimea, Donetsk, and Luhansk regions of Ukraine.”

Infura’s blockade of these regions comes as regulators ramp up intense scrutiny of the crypto industry’s compliance with sanctions imposed by U.S. and other national authorities against Russian entities. Regulators and lawmakers like U.S. Senator Elizabeth Warren and German Finance Minister Christian Lindner have said they’re concerned crypto could be a tool used to undermine sanctions. Industry participants such as exchanges have said they will block sanctioned individuals, but for the most part they have not blocked entire nations outright.

MetaMask accesses the Ethereum blockchain through Infura by design. Unless altered by users, MetaMask’s default endpoints make it subject to Infura’s geographic no-go zones.

Read more: MetaMask, Infura Block ‘Certain Areas’ Amid Crypto Sanctions Fury

Crypto Twitter was reminded of that reality Thursday after Infura mistakenly threw too wide a dragnet. Rumors swirled over a complete blockade to Venezuela; commentators alleged, incorrectly, that MetaMask had been barred in a country where crypto booms and where the U.S. has imposed long-standing but not absolute sanctions.

“In changing some configurations as a result of the new sanctions directives from the United States and other jurisdictions, we mistakenly configured the settings more broadly than they needed to be,” Infura said Thursday in a tweet.

Infra acknowledged the uproar, apologized for its “oversight” and said service had been restored to “inadvertently impacted regions,” though it did not name Venezuela. MetaMask parroted the apology in its own tweet explaining it relies on Infura for access to the blockchain.

“MetaMask is still a decentralized tool,” Kieran Daniels, CEO of crypto startup SmartDeFi told CoinDesk in a Twitter message. “It’s just their default connections aren’t.”

Users are able to set their own endpoints by going into app settings, MetaMask said in a tweet. It shared a guide on how to do so.

Coming amid a global debate on crypto and sanctions, the episode highlighted the seemingly conflicting realities of running uncensorable financial services through centralized rails.

Companies like Infura provide crucial developer and infrastructure services to an array of Ethereum-based projects. But it’s also a U.S. company subject to federal law. When Infura implements restrictions as it did on Thursday, the ripple effects are felt far and wide.

“As a centralized entity, funded by investors like JPMorgan, infrastructure providers like Infura are subject to regulatory concerns,” Josh Neuroth, CEO of decentralized cloud services company Ankr said in a statement. “This over-reliance on centralized service providers goes against everything that Web 3 stands for and is meant to be – and represents a central point of failure that shouldn't exist in the first place.”

Ankr, Inc. is itself a U.S. company. When asked if this meant Ankr must also follow sanctions directives from the U.S. Treasury Department, Neuroth said yes – “but the team is working as quickly as possible toward transitioning to a protocol that exists in the network and isn't run by a company, but a DAO."

The confusing chain of events on Thursday was only made more so by a repeatedly updated “troubleshooting” page on MetaMask’s website. When CoinDesk first reported on this story that page was headlined “Why MetaMask and Infura cannot serve certain areas,” fueling speculation that MetaMask was itself implementing blocks.

A later update narrowed the headline to Infura.

“By default, MetaMask accesses the blockchain via Infura, which is unavailable in certain jurisdictions due to legal compliance,” the page read late Thursday. “When you attempt to use MetaMask in one of those regions,” users will receive an error message.

A chorus of commentators on Twitter insisted that the whole ordeal was proof that MetaMask was not quite as decentralized as they thought.

Left unsaid was the fact that Infura – and therefore MetaMask – have long followed OFAC sanctions guidance.

Crypto users in Iran, North Korea, Cuba and Syria were excluded well before those in parts of Ukraine.