ZachXBT

Source: Pixabay 
Decentralized crypto exchanges Velodrome and Aerodrome have warned users about a front-end security breach on their websites. 
In X posts published on Wednesday, Velodrome and Aerodrome warned users against interacting with their websites until further notice. 
“Our frontend is currently compromised,” the Velodrome team wrote on <a href="https://twitter.com/VelodromeFi/status/1729771762752135463">X</a>. “Please do not interact with Velodrome for the time being. The team are investigating and will communicate more here when we have it.” 
The same warning was posted on Aerodrome’s X account. 
The security breach seems to involve a domain name system (DNS) attack targeting the Aerodrome and Velodrome’s official websites. DNS is a widely utilized protocol crucial for the functioning of websites. 
In DNS attacks, hackers seize control of a site and redirect users to a phishing site linked to a malicious contract, with the intention of illicitly acquiring users’ funds. 
On-chain analyst ZachXBT identified two specific addresses that funds from Aerodrome and Velodrome were being sent to, providing a glimpse into the amount of damage the hackers caused. At time of writing, a combined $70,000 worth of crypto assets have been drained into these two addresses. 
“Looks like stolen funds are going to these two addresses: 0x02BA13f39D7df9C3F7592257b636eD6C7CC4ae78 [and] 0xf64fCEdFCe714Bbe835761e54D7067f2f8231443,” ZachXBT <a href="https://twitter.com/zachxbt/status/1729777066780815540">wrote</a> on X. 
Aerodrome provided an alternate solution, asking its users to only access Aerodrome from its decentralized frontend. 
“Please ensure you are accessing Aerodrome only from our decentralized frontend at <a href="http://aero.drome.eth.limo">http://aero.drome.eth.limo</a>,” Aerodrome <a href="https://twitter.com/aerodromefi/status/1729795692577624465">posted</a> on X, while also noting that “protocol funds are safe and contracts are unaffected.” 
<a href="https://cryptonews.com/news/velodrome-introduce-aerodrome-dex-coinbases-base-network.htm">Velodrome</a> is the second-largest decentralized exchange protocol on the OP Mainnet (previously Optimism) based on total value locked and revenue. The company currently boasts over $139 million in total locked value. 
Meanwhile, Aerodrome is the largest protocol on Base in terms of total value locked (TVL), holding over $63 million in funds. 
Last month, Web3 credentials and rewards platform Galxe <a href="https://cryptonews.com/news/web3-credentials-platform-galxe-refund-396000-affected-users-post-dns-attack-heres-latest.htm">announced</a> its intention to refund over $396,000 to more than 980 users who were impacted by a significant DNS attack. 
The project has also pledged to supplement the refunded amount by an additional 10% as a gesture of goodwill, as outlined in a <a href="https://docs.google.com/spreadsheets/u/1/d/e/2PACX-1vTfVZefCJZf4d2ZPdmXfqhD_dg69ARiD3T5zuVje-5xwhx6Q4DSAVv6rCMyXvQ02SvVIjwhD4kX3VN4/pubhtml">shared document</a>. 
&nbsp;

Aerodrome and Velodrome Suffer Front-End Security Breach

Cryptonews.com

Other articles published on Nov 29, 2023

If Bitcoin Price Holds Above This Level, It Could Rise to $39,000!

Binance Expands Trading Options with New Pairs Including TerraClassicUSD and BLUR

Paxos receives two new in-principle approvals in Abu Dhabi

Forbes publishes ‘Under 30 Wall of Shame’ with Sam Bankman-Fried, Caroline Ellison and Martin Shk...

Understanding the Surge in Short Positions for Two Popular Altcoins

Project Tourbillon: CBDCs Can Meet Privacy Requirements, BIS Research Reveals

Join our free newsletter for daily crypto updates!