DeFi

Security

Ethena

The Ethena website suffered what appears to be a front-end exploit on Sept. 18, and Ethena Labs has cautioned users not to interact with any site or application claiming to be Ethena.
According to a social media <a data-ct-non-breakable="null" href="https://x.com/ethena_labs/status/1836450334329155787" rel="null" target="null" text="null" title="null">post</a> from Ethena Labs, the website’s domain registrar account was compromised, and the site is currently deactivated until the issue is resolved.
Ethena Labs also reassured clients that the Ethena protocol was not affected by the exploit and that all customer funds remain safe.
Security firm Blockaid likewise warned Ethena users who were connected to the site at the time of the exploit not to sign any transactions and to disconnect wallets "immediately."
<figure>
 <img alt="Ethena domain registrar hacked, Ethena Labs warns users to stay away" name="" src="https://s3.cointelegraph.com/uploads/2024-09/01920679-40fd-7fac-b416-933092a55acd">
 <figcaption style="text-align: center;">
 Source: <a data-ct-non-breakable="null" href="https://x.com/blockaid_/status/1836450077914587218" rel="nofollow noopener" target="_blank" text="null" title="https://x.com/blockaid_/status/1836450077914587218">Blockaid</a>.
 </figcaption>
</figure>
MetaMask also issued a warning to Ethena users against fake MetaMask sites attempting to use the Ethena exploit to defraud users, steal seed phrases, and compromise passwords. The decentralized finance wallet also flagged the Ethena website as a "deceptive website" to users — discouraging its use until further notice.
Related: <a data-ct-non-breakable="null" href="https://cointelegraph.com/news/ethenas-risky-path-a-synthetic-stablecoin-cautionary-tale" rel="null" target="null" text="null" title="null">Ethena’s risky path: A synthetic stablecoin cautionary tale</a>
<h2 id="crypto-hacks-top-1-2-billion-in-2024-so-far">Crypto hacks top $1.2 billion in 2024 so far</h2>
According to a recent report from Immunfi, losses from Crypto hacks <a data-ct-non-breakable="null" href="https://cointelegraph.com/news/hackers-surpass-1-2-billion-stolen-2024-immunefi" rel="null" target="null" text="null" title="null">surpassed $1.2 billion in 2024</a> at the end of August. These figures represent a disturbing 15.5% uptick in malicious activity when measured against the same period in 2023.
On Sept. 3, 2024, the Penpie protocol — an independent protocol built on top of Pendle — suffered an exploit resulting in a <a data-ct-non-breakable="null" href="https://cointelegraph.com/news/penpie-protocol-exploited-suffers-27-million-loss" rel="null" target="null" text="null" title="null">$27 million loss of client funds</a>.
More recently, decentralized finance platform Delta Prime <a data-ct-non-breakable="null" href="https://cointelegraph.com/news/delta-prime-defi-hacked-6-m-arbitrum" rel="null" target="null" text="null" title="null">suffered a $6 million hack</a> resulting from a private key exploit. Following the incident, Meir Dolev — chief technical officer of the Cyvers cybersecurity firm — told Cointelegraph, "Hackers took control of the wallet, which is the admin of Delta Prime proxy contacts." Once the malicious actors took control of the wallets, they modified the contracts to drain Delta Prime pools on the Arbitrum network.
The Delta Prime hacker immediately converted the $6 million in stablecoins stolen through the exploit to Ether (<a data-ct-non-breakable="null" href="https://cointelegraph.com/ethereum-price" rel="null" target="null" text="null" title="null">ETH</a>), and onchain sleuth ZackXBT has <a data-ct-non-breakable="null" href="https://x.com/zachxbt/status/1835563015694917831" rel="null" target="null" text="null" title="null">speculated</a> that the malicious activity could be connected to North Korean hackers.
Magazine: <a data-ct-non-breakable="null" href="https://cointelegraph.com/magazine/ivest-hacked-sinkclose-affects-amd-devices-usdt-phishing/" rel="null" target="null" text="null" title="null">Weird ‘null address’ iVest hack, millions of PCs still vulnerable to ‘Sinkclose’ malware: Crypto-Sec</a>

Ethena domain registrar hacked, Ethena Labs warns users to stay away

Table of Contents

Cointelegraph

Other articles published on Sep 18, 2024

Pudgy Penguins CEO Dismisses SEC Concerns Amid NFT Regulatory Scrutiny

Australia sees greater benefits in wholesale CBDC, limits retail interest

FSL, the Creator of STEPN and STEPN GO, to Form Collaboration with Mythos Foundation

How to Play Binance’s Telegram Game Moonbix and Boost Crypto Rewards

Bitcoin Sentuh US$61.000, Didorong Harapan Penurunan Suku Bunga The Fed

Former Coinbase Execs Adopts PayPal’s PYUSD For New Exchange

Join our free newsletter for daily crypto updates!