Compound

DeFi

Celer Network

ZachXBT

Security

<p style="text-align: justify">You can also read this news on BH NEWS: <a href="https://en.bitcoinhaber.net/squarespace-vulnerability-risks-defi-security" data-wpel-link="internal" rel="noopener noreferrer nofollow">Squarespace Vulnerability Risks DeFi Security</a><br></p>
<p style="text-align: justify">A security flaw in Squarespace domains has exposed the decentralized finance (DeFi) sector to phishing attacks. On July 11, security researcher ZachXBT alerted the community to avoid the Compound Finance website, which had redirected users to a phishing site. This vulnerability raises significant concerns for multiple DeFi protocols and users’ online safety.</p>
<h2 id="new-attack-method-in-the-web3-space">New Attack Method in the Web3 Space</h2>
<p style="text-align: justify">The first known victim of this vulnerability was the DeFi protocol Compound Finance. Subsequently, Celer Network reported a similar attack but managed to prevent any breach. DefiLlama developer 0xngmi identified over 100 protocols, including Polymarket, dYdX, and Pendle Finance, as susceptible to the same attack vector. This widespread risk underscores the urgent need for enhanced security measures within the DeFi ecosystem.</p>
<p style="text-align: justify">CoinGecko founder Bobby Ong explained that the attacks stemmed from Squarespace’s domain registrar. After <a href="https://newslinker.co" target="_blank" rel="noopener noreferrer nofollow" data-wpel-link="exclude">Google</a> sold its domain <a href="https://finance.coin-turk.com/" rel="noopener noreferrer nofollow" target="_blank" data-wpel-link="exclude">business</a> to Squarespace, mandatory domain transfers led to the removal of two-factor authentication (2FA), leaving domains vulnerable to attacks. Ong advised the community to refrain from engaging in crypto activities until the issue is resolved.</p>
<h2 id="notable-statements-on-the-issue">Notable Statements on the Issue</h2>
<p style="text-align: justify">Security expert Samzsun suggested affected users consider transferring their domains to providers like Cloudflare, Amazon Web Services Route 53, MarkMonitor, and CSC DBS. Unstoppable Domains (UD) CEO Matthew Gould emphasized the potential of <a href="https://en.bitcoinhaber.net/new-smartphone-emerges-with-built-in-crypto-capabilities-for-global-developing-markets" data-wpel-link="internal" rel="noopener noreferrer nofollow">Web3</a> domains in preventing such attacks by creating verified on-chain records for added security.</p>
<h2 id="practical-security-recommendations">Practical Security Recommendations</h2>
<ul>
 <li>Transfer domains to providers with robust security features like Cloudflare or Amazon Web Services Route 53.</li>
 <li>Implement verified on-chain records for domains to add an extra layer of browser protection.</li>
 <li>Configure DNS records to be non-updatable without a verified on-chain signature.</li>
 <li>Ensure record updates require signatures from user wallets to mitigate the risk of domain tampering.</li>
</ul>
<p style="text-align: justify">In conclusion, the recent security vulnerability in Squarespace domains poses a significant threat to the DeFi sector. Security experts recommend immediate action, including transferring domains to more secure providers and implementing on-chain signatures to safeguard against phishing attacks. Until these measures are in place, users are advised to limit their interactions with crypto platforms.</p>
<h5><span style="font-weight:bold;font-size:16px">The post first appeared on BH NEWS: </span> <a href="https://en.bitcoinhaber.net/squarespace-vulnerability-risks-defi-security" data-wpel-link="internal" rel="noopener noreferrer nofollow">Squarespace Vulnerability Risks DeFi Security</a></h5>

Squarespace Vulnerability Risks DeFi Security

Table of Contents

BH NEWS

Other articles published on Jul 12, 2024

MultiversX (EGLD), UNUS SED LEO and Rollblock All Defy Bitcoin Crash With The Later Surging Over 50%

Earn Free Cryptocurrency with Airdrops

3 Altcoins That Could Turn $500 into $500,000 During the Bull Run

Bitcoin Selloff Intensifies As German Govt. Offloads 3450 BTC To Exchanges

Bitcoin Could Soar to $100,000 by Year-End, Standard Chartered Predicts

MoonBag Presale Attracts Interest from Shiba Inu and SingularityNet Investors

Join our free newsletter for daily crypto updates!