Compound

DeFi

Celer Network

ZachXBT

Tornado Cash

As the vulnerability on Squarespace domains threatens the decentralized finance (DeFi) space with phishing attacks, Web3 professionals shared their advice on what users and those affected can do to avoid the attacks.&nbsp;
On July 11, security investigator ZachXBT <a href="https://cointelegraph.com/news/compound-finance-website-hijacked-security-warning">shared a Telegram post</a> warning the community to stay away from the Compound Finance website, which redirected to a phishing site. The DeFi protocol was the first to be hijacked because of the vulnerability. 
Following this, the Celer Network announced that it had also been attacked but successfully thwarted the attempt. 
Meanwhile, DefiLlama developer “0xngmi”&nbsp;<a href="https://cointelegraph.com/news/defi-apps-targeted-squarespace-dns-registry-attack-blockaid">shared a list of domains</a> vulnerable to the same attack vector. The list had over 100 protocols, including Polymarket, dYdX and Pendle Finance. 
<h2 data-ct-non-breakable="true" id="don-t-interact-with-crypto-for-the-next-few-days">Don’t interact with crypto for the next few days</h2>
CoinGecko founder Bobby Ong said the attack stemmed from Squarespace’s domain registrar. The executive explained that after Google sold its domain business to Squarespace, two-factor authentication (2FA) was removed due to the forced migration of domains. 
This made the domains vulnerable. According to Ong, the community should wait until the issue is fixed before interacting with crypto again. “Best thing to do is to not interact with crypto and rest for the next couple of days until everything is resolved,” Ong <a href="https://twitter.com/bobbyong/status/1811409900754661420" target="_blank" rel="noopener nofollow">added</a>. 
Related: <a href="https://cointelegraph.com/news/coinstats-hack-1m-eth-transferred-tornado-cash">CoinStats exploiter moves almost $1M to Tornado Cash</a>
<h2 data-ct-non-breakable="true" id="consider-transferring-to-other-domain-providers">Consider transferring to other domain providers</h2>
Security researcher Samzsun <a href="https://x.com/samczsun/status/1811367830564307451" target="_blank" rel="noopener nofollow">said</a> those affected by the recent domain hijacking on Squarespace might need to consider transferring to other providers. The white hat hacker recommended Cloudflare, Amazon Web Services Route 53, MarkMonitor and CSC DBS. 
Meanwhile, Matthew Gould, the founder and CEO of Web3 domain provider Unstoppable Domains (UD), took the opportunity to explain how this type of attack may be avoided with Web3 domains. Gould explained: 
<blockquote data-ct-non-breakable="true">
 “By creating verified onchain records for domains we can offer an extra layer of protection browsers and others can check to help fight these types of attacks.”
</blockquote>
The executive <a href="https://x.com/matthewegould/status/1811414083280760844" target="_blank" rel="noopener nofollow">added</a> that users could even configure their DNS records to not update unless they provide a verified onchain signature. 
The executive also floated the idea of disallowing records updates without signatures from wallets. This would require hackers to attack the registrar and the user separately. 
“So if your UD account was compromised, or UD itself as a registrar was compromised, but not your wallet, the malicious user could not alter your domain in DNS," Gould added. 
Magazine: <a href="https://cointelegraph.com/magazine/north-korean-hackers-private-keys-flash-loan-attacks/">Lazarus Group’s favorite exploit revealed — Crypto hacks analysis</a>

Crypto execs on DeFi domain hacks: Don’t interact with crypto for now

Table of Contents

Cointelegraph

Other articles published on Jul 12, 2024

Dow Reaches Record Highs Above 40,000, Small Caps Ride The Rate-Cut Wave, EV Stocks Rally: What's...

UMA (UMA) Price Prediction 2025, 2026, 2027, 2028, 2029 and 2030

This Week in Crypto: German Bitcoin Sell-Offs, US CPI Data, and Celer DNS Attack

Shiba Inu 180% Surge in Buys: Reversal Incoming?

Meme Sol Labs Secures Series A Funding From EQT Ventures And Partners With Black Rights Organizat...

Exploring MS404: The MintSwap Native Asset Built upon ERC-404 Standard

Join our free newsletter for daily crypto updates!