Compound

DeFi

ZachXBT

Planet

Domain

<div class="intro-text"> 
 A security vulnerability affecting Squarespace domains has exposed numerous DeFi protocols to phishing attacks, prompting industry experts to issue warnings and advice to users. 
</div> 
On July 11, blockchain investigator ZachXBT alerted the community via Telegram about Compound Finance’s website being redirected to a phishing site due to this vulnerability. The DeFi protocol subsequently<a href="https://defi-planet.com/2024/07/compound-finance-confirms-website-breach-amid-ongoing-cyber-attack-urges-users-to-avoid-site/#google_vignette"> confirmed</a> the breach of its website and urged users to avoid it while it works on providing updates on the issue. 
However, the scope of the vulnerability extends beyond Compound Finance. DefiLlama developer 0xngmi<a href="https://twitter.com/0xngmi/status/1811376786799784348?t=SNAOqdzUqDoaS4KHEDebuA&amp;s=19"> identified</a> over 100 vulnerable domains, including prominent platforms such as Polymarket, dYdX, and Pendle Finance. 
CoinGecko founder Bobby Ong<a href="https://twitter.com/bobbyong/status/1811409900754661420?t=G9UR1I-F7VuebEv6gyD_GQ&amp;s=19"> attributed</a> the issue to a security lapse following Google’s sale of its domain business to Squarespace. The forced migration of domains resulted in the removal of two-factor authentication (2FA), creating a security gap. 
In response to the threat, Ong advised users to refrain from crypto interactions for a few days until the vulnerability is resolved. Security researcher Samzsun<a href="https://twitter.com/samczsun/status/1811367830564307451?t=JiTYAM6TCyfRiYOR43FiHw&amp;s=19"> recommended</a> that affected users consider transferring their domains to more secure providers like Cloudflare, Amazon Web Services Route 53, MarkMonitor, or CSC DBS. 
Matthew Gould, founder and CEO of Web3 domain provider Unstoppable Domains (UD),<a href="https://twitter.com/matthewegould/status/1811414083280760844?t=XR9jEW1IpnJWnGY5FgLcEg&amp;s=19"> proposed</a> that such attacks could be prevented with Web3 domains. He explained that creating verified on-chain records for domains adds an extra layer of security, allowing browsers and other entities to verify authenticity. Gould also suggested configuring DNS records to update only with a verified on-chain signature, which would require hackers to compromise both the registrar and the user separately. 
<blockquote>
 “If your UD account was compromised, or UD itself as a registrar was compromised, but not your wallet, the malicious user could not alter your domain in DNS,“
</blockquote> 
Gould added. 
These developments come against a backdrop of increasing cyber threats affecting the cryptocurrency industry. According to<a href="https://defi-planet.com/2024/07/coinbase-users-targeted-in-sophisticated-phishing-scams-losses-mount/#google_vignette"> reports</a>, at least three Coinbase users were targeted by scammers posing as Coinbase staff in the past week, and one of the victims lost more than $1 million. 
&nbsp; 
If you want to read more news articles like this, visit <a style="color: #0000ff;" href="https://defi-planet.com/">DeFi Planet</a> and follow us on <a style="color: #0000ff;" href="https://twitter.com/PlanetDefi">Twitter</a>, <a style="color: #0000ff;" href="https://www.linkedin.com/company/defi-planet/">LinkedIn</a>, <a style="color: #0000ff;" href="https://www.facebook.com/DeFi-Planet-129907662611402">Facebook</a>, <a style="color: #0000ff;" href="https://www.instagram.com/defi.planet/">Instagram</a>, and <a style="color: #0000ff;" href="https://coinmarketcap.com/community/profile/DeFiPlanet/">CoinMarketCap Community</a>. 
“Take control of your crypto portfolio with MARKETS PRO, DeFi Planet’s suite of analytics tools.” 
The post <a href="https://defi-planet.com/2024/07/experts-advise-caution-as-squarespace-domain-vulnerability-threatens-defi/">Experts Advise Caution as Squarespace Domain Vulnerability Threatens DeFi</a> appeared first on <a href="https://defi-planet.com">DeFi Planet</a>.

Experts Advise Caution as Squarespace Domain Vulnerability Threatens DeFi

DeFi Planet

Other articles published on Jul 12, 2024

Bitcoin Selloff Intensifies As German Govt. Offloads 3450 BTC To Exchanges

Bitcoin Whales Increase Holdings Amid German Government Sell-Off

SEC’s Secret Bank Exemptions for Crypto Custody: Favoritism or Risk Management?

MoonBag Emerges As The Top Crypto Presale in 2024 While Thorchain And Polkadot Lose The Investors...

New bill suggests thwarting AI copycats, deepfakes with watermarks

Ethereum Price Rises Amid Challenges: Will ETH Break Above $3,200?

Join our free newsletter for daily crypto updates!