Compound

DeFi

Celer Network

ZachXBT

Tornado Cash

As the vulnerability on Squarespace domains threatens the decentralized finance (DeFi) space with phishing attacks, Web3 professionals shared their advice on what users and those affected can do to avoid the attacks.&nbsp;
On July 11, security investigator ZachXBT <a href="https://cointelegraph.com/news/compound-finance-website-hijacked-security-warning">shared a Telegram post</a> warning the community to stay away from the Compound Finance website, which redirected to a phishing site. The DeFi protocol was the first to be hijacked because of the vulnerability. 
Following this, the Celer Network announced that it had also been attacked but successfully thwarted the attempt. 
Meanwhile, DefiLlama developer “0xngmi”&nbsp;<a href="https://cointelegraph.com/news/defi-apps-targeted-squarespace-dns-registry-attack-blockaid">shared a list of domains</a> vulnerable to the same attack vector. The list had over 100 protocols, including Polymarket, dYdX and Pendle Finance. 
<h2 data-ct-non-breakable="true" id="don-t-interact-with-crypto-for-the-next-few-days">Don’t interact with crypto for the next few days</h2>
CoinGecko founder Bobby Ong said the attack stemmed from Squarespace’s domain registrar. The executive explained that after Google sold its domain business to Squarespace, two-factor authentication (2FA) was removed due to the forced migration of domains. 
This made the domains vulnerable. According to Ong, the community should wait until the issue is fixed before interacting with crypto again. “Best thing to do is to not interact with crypto and rest for the next couple of days until everything is resolved,” Ong <a href="https://twitter.com/bobbyong/status/1811409900754661420" target="_blank" rel="noopener nofollow">added</a>. 
Related: <a href="https://cointelegraph.com/news/coinstats-hack-1m-eth-transferred-tornado-cash">CoinStats exploiter moves almost $1M to Tornado Cash</a>
<h2 data-ct-non-breakable="true" id="consider-transferring-to-other-domain-providers">Consider transferring to other domain providers</h2>
Security researcher Samzsun <a href="https://x.com/samczsun/status/1811367830564307451" target="_blank" rel="noopener nofollow">said</a> those affected by the recent domain hijacking on Squarespace might need to consider transferring to other providers. The white hat hacker recommended Cloudflare, Amazon Web Services Route 53, MarkMonitor and CSC DBS. 
Meanwhile, Matthew Gould, the founder and CEO of Web3 domain provider Unstoppable Domains (UD), took the opportunity to explain how this type of attack may be avoided with Web3 domains. Gould explained: 
<blockquote data-ct-non-breakable="true">
 “By creating verified onchain records for domains we can offer an extra layer of protection browsers and others can check to help fight these types of attacks.”
</blockquote>
The executive <a href="https://x.com/matthewegould/status/1811414083280760844" target="_blank" rel="noopener nofollow">added</a> that users could even configure their DNS records to not update unless they provide a verified onchain signature. 
The executive also floated the idea of disallowing records updates without signatures from wallets. This would require hackers to attack the registrar and the user separately. 
“So if your UD account was compromised, or UD itself as a registrar was compromised, but not your wallet, the malicious user could not alter your domain in DNS," Gould added. 
Magazine: <a href="https://cointelegraph.com/magazine/north-korean-hackers-private-keys-flash-loan-attacks/">Lazarus Group’s favorite exploit revealed — Crypto hacks analysis</a>

Crypto execs on DeFi domain hacks: Don’t interact with crypto for now

Table of Contents

Cointelegraph

Other articles published on Jul 12, 2024

MBAG: The Top Meme Coin Presale Promising Massive Returns for TIA and FDUSD Investors

Russia’s economy sees unprecedented growth in 2024

Why Only XRP Price Surge Amid Crypto Market Decline?

XRP Gains Amid Market Downturn

Solana (SOL) Price Prediction for July 12

Exciting News! NOMOEX KYC Verified & Approved by AssureDefi

Join our free newsletter for daily crypto updates!