Compound

DeFi

Celer Network

ZachXBT

Security

<p style="text-align: justify">You can also read this news on BH NEWS: <a href="https://en.bitcoinhaber.net/squarespace-vulnerability-risks-defi-security" data-wpel-link="internal" rel="noopener noreferrer nofollow">Squarespace Vulnerability Risks DeFi Security</a><br></p>
<p style="text-align: justify">A security flaw in Squarespace domains has exposed the decentralized finance (DeFi) sector to phishing attacks. On July 11, security researcher ZachXBT alerted the community to avoid the Compound Finance website, which had redirected users to a phishing site. This vulnerability raises significant concerns for multiple DeFi protocols and users’ online safety.</p>
<h2 id="new-attack-method-in-the-web3-space">New Attack Method in the Web3 Space</h2>
<p style="text-align: justify">The first known victim of this vulnerability was the DeFi protocol Compound Finance. Subsequently, Celer Network reported a similar attack but managed to prevent any breach. DefiLlama developer 0xngmi identified over 100 protocols, including Polymarket, dYdX, and Pendle Finance, as susceptible to the same attack vector. This widespread risk underscores the urgent need for enhanced security measures within the DeFi ecosystem.</p>
<p style="text-align: justify">CoinGecko founder Bobby Ong explained that the attacks stemmed from Squarespace’s domain registrar. After <a href="https://newslinker.co" target="_blank" rel="noopener noreferrer nofollow" data-wpel-link="exclude">Google</a> sold its domain <a href="https://finance.coin-turk.com/" rel="noopener noreferrer nofollow" target="_blank" data-wpel-link="exclude">business</a> to Squarespace, mandatory domain transfers led to the removal of two-factor authentication (2FA), leaving domains vulnerable to attacks. Ong advised the community to refrain from engaging in crypto activities until the issue is resolved.</p>
<h2 id="notable-statements-on-the-issue">Notable Statements on the Issue</h2>
<p style="text-align: justify">Security expert Samzsun suggested affected users consider transferring their domains to providers like Cloudflare, Amazon Web Services Route 53, MarkMonitor, and CSC DBS. Unstoppable Domains (UD) CEO Matthew Gould emphasized the potential of <a href="https://en.bitcoinhaber.net/new-smartphone-emerges-with-built-in-crypto-capabilities-for-global-developing-markets" data-wpel-link="internal" rel="noopener noreferrer nofollow">Web3</a> domains in preventing such attacks by creating verified on-chain records for added security.</p>
<h2 id="practical-security-recommendations">Practical Security Recommendations</h2>
<ul>
 <li>Transfer domains to providers with robust security features like Cloudflare or Amazon Web Services Route 53.</li>
 <li>Implement verified on-chain records for domains to add an extra layer of browser protection.</li>
 <li>Configure DNS records to be non-updatable without a verified on-chain signature.</li>
 <li>Ensure record updates require signatures from user wallets to mitigate the risk of domain tampering.</li>
</ul>
<p style="text-align: justify">In conclusion, the recent security vulnerability in Squarespace domains poses a significant threat to the DeFi sector. Security experts recommend immediate action, including transferring domains to more secure providers and implementing on-chain signatures to safeguard against phishing attacks. Until these measures are in place, users are advised to limit their interactions with crypto platforms.</p>
<h5><span style="font-weight:bold;font-size:16px">The post first appeared on BH NEWS: </span> <a href="https://en.bitcoinhaber.net/squarespace-vulnerability-risks-defi-security" data-wpel-link="internal" rel="noopener noreferrer nofollow">Squarespace Vulnerability Risks DeFi Security</a></h5>

Squarespace Vulnerability Risks DeFi Security

目录

BH NEWS

发布于 2024年7月12日的其他文章

Stellar Price Prediction: How High Can XLM Price Trade in July?

Earn Free Cryptocurrency with Airdrops

SEC vs. Crypto – Two consecutive Victories for Crypto Ecosystem

XRP Featured In Grayscale’s Weekly Spotlight Of Prominent Cryptos

SushiSwap (SUSHI) Price Prediction 2025, 2026, 2027, 2028, 2029 and 2030

Pepe Price Prediction: PEPE Plunges 7% As This New Pepe Upgrade Zooms Towards $4 Million In Presale

订阅我们免费的电子期刊，获取每日最新加密领域动态！