Compound

DeFi

ZachXBT

Planet

Domain

<div class="intro-text"> 
 A security vulnerability affecting Squarespace domains has exposed numerous DeFi protocols to phishing attacks, prompting industry experts to issue warnings and advice to users. 
</div> 
On July 11, blockchain investigator ZachXBT alerted the community via Telegram about Compound Finance’s website being redirected to a phishing site due to this vulnerability. The DeFi protocol subsequently<a href="https://defi-planet.com/2024/07/compound-finance-confirms-website-breach-amid-ongoing-cyber-attack-urges-users-to-avoid-site/#google_vignette"> confirmed</a> the breach of its website and urged users to avoid it while it works on providing updates on the issue. 
However, the scope of the vulnerability extends beyond Compound Finance. DefiLlama developer 0xngmi<a href="https://twitter.com/0xngmi/status/1811376786799784348?t=SNAOqdzUqDoaS4KHEDebuA&amp;s=19"> identified</a> over 100 vulnerable domains, including prominent platforms such as Polymarket, dYdX, and Pendle Finance. 
CoinGecko founder Bobby Ong<a href="https://twitter.com/bobbyong/status/1811409900754661420?t=G9UR1I-F7VuebEv6gyD_GQ&amp;s=19"> attributed</a> the issue to a security lapse following Google’s sale of its domain business to Squarespace. The forced migration of domains resulted in the removal of two-factor authentication (2FA), creating a security gap. 
In response to the threat, Ong advised users to refrain from crypto interactions for a few days until the vulnerability is resolved. Security researcher Samzsun<a href="https://twitter.com/samczsun/status/1811367830564307451?t=JiTYAM6TCyfRiYOR43FiHw&amp;s=19"> recommended</a> that affected users consider transferring their domains to more secure providers like Cloudflare, Amazon Web Services Route 53, MarkMonitor, or CSC DBS. 
Matthew Gould, founder and CEO of Web3 domain provider Unstoppable Domains (UD),<a href="https://twitter.com/matthewegould/status/1811414083280760844?t=XR9jEW1IpnJWnGY5FgLcEg&amp;s=19"> proposed</a> that such attacks could be prevented with Web3 domains. He explained that creating verified on-chain records for domains adds an extra layer of security, allowing browsers and other entities to verify authenticity. Gould also suggested configuring DNS records to update only with a verified on-chain signature, which would require hackers to compromise both the registrar and the user separately. 
<blockquote>
 “If your UD account was compromised, or UD itself as a registrar was compromised, but not your wallet, the malicious user could not alter your domain in DNS,“
</blockquote> 
Gould added. 
These developments come against a backdrop of increasing cyber threats affecting the cryptocurrency industry. According to<a href="https://defi-planet.com/2024/07/coinbase-users-targeted-in-sophisticated-phishing-scams-losses-mount/#google_vignette"> reports</a>, at least three Coinbase users were targeted by scammers posing as Coinbase staff in the past week, and one of the victims lost more than $1 million. 
&nbsp; 
If you want to read more news articles like this, visit <a style="color: #0000ff;" href="https://defi-planet.com/">DeFi Planet</a> and follow us on <a style="color: #0000ff;" href="https://twitter.com/PlanetDefi">Twitter</a>, <a style="color: #0000ff;" href="https://www.linkedin.com/company/defi-planet/">LinkedIn</a>, <a style="color: #0000ff;" href="https://www.facebook.com/DeFi-Planet-129907662611402">Facebook</a>, <a style="color: #0000ff;" href="https://www.instagram.com/defi.planet/">Instagram</a>, and <a style="color: #0000ff;" href="https://coinmarketcap.com/community/profile/DeFiPlanet/">CoinMarketCap Community</a>. 
“Take control of your crypto portfolio with MARKETS PRO, DeFi Planet’s suite of analytics tools.” 
The post <a href="https://defi-planet.com/2024/07/experts-advise-caution-as-squarespace-domain-vulnerability-threatens-defi/">Experts Advise Caution as Squarespace Domain Vulnerability Threatens DeFi</a> appeared first on <a href="https://defi-planet.com">DeFi Planet</a>.

Experts Advise Caution as Squarespace Domain Vulnerability Threatens DeFi

DeFi Planet

Other articles published on Jul 12, 2024

Dogwifhat and Shiba Inu Tucks Tails as Investors Flock to Utility-Driven Coin Rollblock For 100x ...

Web3 repeats legacy issues of access for Black and Latino founders, survey shows

Spot Ethereum ETFs FOMO: Tron Founder Justin Sun Drops $5 Million On ETH

Bitcoin and Crypto Markets Poised for August Resurgence, JPMorgan Analysts Predict

Bitcoin: Miners could bounce back thanks to AI

Leading Altcoins in 2024: BlockDAG’s X100 Miner Boosts Presale to $57.4M Amid Ethereum Product Fl...

Join our free newsletter for daily crypto updates!