Compound

DeFi

Celer Network

ZachXBT

Tornado Cash

As the vulnerability on Squarespace domains threatens the decentralized finance (DeFi) space with phishing attacks, Web3 professionals shared their advice on what users and those affected can do to avoid the attacks.&nbsp;
On July 11, security investigator ZachXBT <a href="https://cointelegraph.com/news/compound-finance-website-hijacked-security-warning">shared a Telegram post</a> warning the community to stay away from the Compound Finance website, which redirected to a phishing site. The DeFi protocol was the first to be hijacked because of the vulnerability. 
Following this, the Celer Network announced that it had also been attacked but successfully thwarted the attempt. 
Meanwhile, DefiLlama developer “0xngmi”&nbsp;<a href="https://cointelegraph.com/news/defi-apps-targeted-squarespace-dns-registry-attack-blockaid">shared a list of domains</a> vulnerable to the same attack vector. The list had over 100 protocols, including Polymarket, dYdX and Pendle Finance. 
<h2 data-ct-non-breakable="true" id="don-t-interact-with-crypto-for-the-next-few-days">Don’t interact with crypto for the next few days</h2>
CoinGecko founder Bobby Ong said the attack stemmed from Squarespace’s domain registrar. The executive explained that after Google sold its domain business to Squarespace, two-factor authentication (2FA) was removed due to the forced migration of domains. 
This made the domains vulnerable. According to Ong, the community should wait until the issue is fixed before interacting with crypto again. “Best thing to do is to not interact with crypto and rest for the next couple of days until everything is resolved,” Ong <a href="https://twitter.com/bobbyong/status/1811409900754661420" target="_blank" rel="noopener nofollow">added</a>. 
Related: <a href="https://cointelegraph.com/news/coinstats-hack-1m-eth-transferred-tornado-cash">CoinStats exploiter moves almost $1M to Tornado Cash</a>
<h2 data-ct-non-breakable="true" id="consider-transferring-to-other-domain-providers">Consider transferring to other domain providers</h2>
Security researcher Samzsun <a href="https://x.com/samczsun/status/1811367830564307451" target="_blank" rel="noopener nofollow">said</a> those affected by the recent domain hijacking on Squarespace might need to consider transferring to other providers. The white hat hacker recommended Cloudflare, Amazon Web Services Route 53, MarkMonitor and CSC DBS. 
Meanwhile, Matthew Gould, the founder and CEO of Web3 domain provider Unstoppable Domains (UD), took the opportunity to explain how this type of attack may be avoided with Web3 domains. Gould explained: 
<blockquote data-ct-non-breakable="true">
 “By creating verified onchain records for domains we can offer an extra layer of protection browsers and others can check to help fight these types of attacks.”
</blockquote>
The executive <a href="https://x.com/matthewegould/status/1811414083280760844" target="_blank" rel="noopener nofollow">added</a> that users could even configure their DNS records to not update unless they provide a verified onchain signature. 
The executive also floated the idea of disallowing records updates without signatures from wallets. This would require hackers to attack the registrar and the user separately. 
“So if your UD account was compromised, or UD itself as a registrar was compromised, but not your wallet, the malicious user could not alter your domain in DNS," Gould added. 
Magazine: <a href="https://cointelegraph.com/magazine/north-korean-hackers-private-keys-flash-loan-attacks/">Lazarus Group’s favorite exploit revealed — Crypto hacks analysis</a>

Crypto execs on DeFi domain hacks: Don’t interact with crypto for now

Mục lục

Cointelegraph

Các bài viết khác được xuất bản trên 12 thg 7, 2024

Breaking: Germany Runs Of Bitcoin With 3846 BTC Moved To Flow Traders

BlackRock Partners with MakerDAO for Treasuries

Stellar’s XLM token forms bullish divergence, but risks remain

Shiba Shootout Comes Out Guns Blazing With $600K Raised In Presale As Mobile Game Debuts

UMA (UMA) Price Prediction 2025, 2026, 2027, 2028, 2029 and 2030

Exciting BONK and Manta Network Collaboration: 1M MANTA Tokens Up for Grabs

Tham gia bản tin miễn phí của chúng tôi để cập nhật tin tức về tiền điện tử hàng ngày!