Compound

ZachXBT

Crypto investigator ZachXBT has warned users to avoid the Compound Finance website, which appears to have been hijacked.&nbsp;
On July 11, the security investigator <a href="https://t.me/investigations/140" target="_blank" rel="noopener nofollow">published</a> a post on Telegram telling the community to stay away from the website for the time being. According to ZachXBT, the website redirects to a newly registered phishing site and may pose a substantial security risk. 
<figure>
 <img src="https://s3.cointelegraph.com/uploads/2024-07/1bf2f50d-3601-4321-af78-7c9ee14d1756.jpg" alt="Compound Finance site potentially breached — ZachXBT">
 <figcaption style="text-align: center;">
 ZachXBT warns users to stay away from the Compound Finance website. Source: ZachXBT
 </figcaption>
</figure>
In the meantime, a member of the Compound Finance team confirmed the breach and advised users to avoid interacting with the site to prevent potential losses of personal data and funds. 
<figure>
 <img src="https://s3.cointelegraph.com/uploads/2024-07/e0a19f9d-d313-4d12-8063-71806b44b162.jpg" alt="Compound Finance site potentially breached — ZachXBT">
 <figcaption style="text-align: center;">
 Source: <a href="https://x.com/LewellenMichael/status/1811303839888261530" target="_blank" rel="noopener nofollow">Michael Lewellen</a>
 </figcaption>
</figure>
Michael Lewellen, security adviser at the Compound Finance DAO, alerted users of the breach. According to Lewellen, the URL has been compromised and is hosting a phishing website. The security adviser warned users not to interact with the site. Despite this, Lewellen assured users that the protocol was not impacted and that the smart contract funds were safe. 
Cointelegraph approached the Compound Labs team for comments but has not yet received a response.
<h2 id="compound-finance-s-x-account-hacked-in-2023">Compound Finance’s X account hacked in 2023</h2>
The company is not new to security attacks. In 2023, the decentralized finance (DeFi) protocol’s official X account was <a href="https://cointelegraph.com/news/compound-finance-x-twitter-account-hacked-posted-scam-link">taken over by hackers</a>. Like the recent incident, the hackers exploited the company’s social media platform to promote a phishing website. 
Back then, the account posted an advertisement promoting free crypto tokens. It also urged users to click a link imitating the protocol’s official site. However, it was quickly flagged as a scam. 
Cybersecurity blogger Officer’s Notes and blockchain security platform Scam Sniffer confirmed that the account had posted phishing links. 
On Dec. 30, 2023, the Compound Labs team confirmed they were compromised for four hours before recovering the account. They also informed their users that they had removed the spam messages. 
Related: <a href="https://cointelegraph.com/news/investors-lose-1-6-million-doja-cat-x-reportedly-hacked">Investors lose $1.6M after Doja Cat’s X reportedly hacked to promote scam coin</a>
<h2 id="phishing-attacks-caused-almost-498-million-in-losses-in-2024">Phishing attacks caused almost $498 million in losses in 2024</h2>
On April 4, CertiK CEO co-founder Ronghui Gu urged the community to proactively <a href="https://cointelegraph.com/news/crypto-phishing-attacks-alarming-certik">prepare for attacks</a> as the market continues to grow. At the time, the company noticed that phishing attacks in the crypto space had reached “alarming levels.” 
On July 3, the company reported that losses in crypto security incidents reached $1.19 billion in the first half of 2024. The report <a href="https://cointelegraph.com/news/certik-report-crypto-losses-h1-2024">attributed almost $498 million</a> in digital asset losses to phishing attacks. Because of this, Gu emphasized the need for multifactor authentication and better security practices. 
Magazine: <a href="https://cointelegraph.com/magazine/north-korean-hackers-private-keys-flash-loan-attacks/">Lazarus Group’s favorite exploit revealed — Crypto hacks analysis</a>

Compound Finance site potentially breached — ZachXBT

Table of Contents

Cointelegraph

Other articles published on Jul 11, 2024

BREAKING News!! SEC Withdrew Its Investigation Against Paxos

Best Airdrops to Join Now

Bitcoin Prices Defy Inflation Data

Minswap Enhances Cardano Trading with V2: Dynamic Fees and Partial Fill Features

Breaking: Paxos Wins as SEC Ends BUSD Stablecoin Investigation

The MoonBag Monkey, The Top Crypto Presale in 2024, Swings Past SingularityNet and Solana to New ...

Join our free newsletter for daily crypto updates!