Pendle

Celer Network

Security

On July 11, DeFiLlama developer 0xngmi identified that around 128 protocols' front-end websites, including Pendle Finance, dYdX, Thorchain, and Axelar, might be at risk. While Pendle's domain remains secure, caution is advised for all project websites utilizing Squarespace domain services. 
Additionally, Celer Network is another significant name on the list. 0xngmi clarified that these sites are not currently compromised but are considered "at risk" due to their use of Squarespace, a widely used domain registrar.
The websites are experiencing a DNS domain attack affecting multiple projects simultaneously. This ongoing DNS attack targets the Squarespace domain registrar. It is recommended to avoid interacting with <a href="https://www.coingabbar.com/en/crypto-currency-news/malaysia-confronts-crypto-mining-electricity-theft" title="crypto" class="f-link">crypto</a>-related activities for the next few days until the issue is resolved.
CoinGecko founder Bobby Ong took to X to&nbsp;explain the incident. According to him&nbsp;after Google sold its domain business to Squarespace in June 2023, two-factor authentication was removed due to the forced migration of domains.
<img src="https://lh7-us.googleusercontent.com/docsz/AD_4nXd_jFQdG37ep87eOZTxPDfekYJnRImL4yq90WnAbVOJdN6WXP42g6mi5MqvuQuKOj322rsIcBHYXpUZ_xiWFcT3JcNniz7exm_R_VsbjzUozNe49T1QNEs4KlyfdF-IlGfG50iLzXnZjIJGqtsDORVcjojn?key=kyKBg7yIMQoTknmeo3o7Nw" width="465" height="237">
Source: X
DefiLlama's founder is actively updating the list of at-risk Squarespace domains to protect users from potential attacks.
<h3 id="span-span-data-font-font-size-style-font-size-16px-which-projects-are-at-risk-span-span">Which Projects Are at Risk?</h3>
As per the latest update, the list now contains 103 domains, with new additions including lockon.finance, aloe.capital, starlay.finance, layer2.finance, ohmycrypt.com, xbank.finance, 88mph.app, ion.wtf, etc. Moreover, users of these domains are advised to remain vigilant.
These domains are flagged as potentially vulnerable because they use Squarespace. The founder of DefiLlama has been regularly updating this list to alert users about possible security risks. Inclusion on this list does not confirm that a domain has been compromised, but it suggests that it could be a target for attacks.&nbsp;
Security researcher Samzsun advised those impacted by the recent Squarespace domain hijacking to consider switching to alternative providers. The white hat hacker suggested options such as Cloudflare, Amazon Web Services Route 53, MarkMonitor, and CSC DBS.
In the meantime, Matthew Gould, founder and CEO of <a href="https://www.coingabbar.com/en/crypto-currency-news/galxe-gravity-token-migration" title="Web3" class="f-link">Web3</a> domain provider Unstoppable Domains (UD), highlighted how Web3 domains could help prevent such attacks.
"Creating verified on-chain records for domains can add an extra layer of protection and help fight such attacks", Gould added.
<h4>Conclusion</h4>
The recent DNS attack on Squarespace domains has put around 128 protocols' front-end websites at risk, prompting caution for users of these services. While no domains have been compromised yet, the ongoing threat highlights the need for vigilance. Security experts recommend considering alternative domain providers and exploring Web3 domains for enhanced protection. DefiLlama continues to update the list of at-risk domains to keep users informed and secure.&nbsp;
Also Read:&nbsp;<a href="https://www.coingabbar.com/en/crypto-currency-news/fintax-ton-ecosystem-launch" title="FinTAX: TON Ecosystem's First Professional Tax Software Launched" class="f-link">FinTAX: TON Ecosystem's First Professional Tax Softwar</a>

DefiLlama Updated DNS Attack List; Squarespace Domains at Risk

Table of Contents

Coingabbar

Other articles published on Jul 12, 2024

Germany’s Bitcoin Reserves Drop to 9K After Massive Sell-Off

Lucie Addresses Criticism Towards Shiba Inu

WienerAI Crypto Presale Ends July 31st - Tier 1 CEX Listings Rumored

MoonBag Presale Dominates Crypto Presales in 2024 Leaving Chainlink and Starknet Behind

Crypto Market Crash Is ‘Normal’, VanEck CEO Remains Bullish

The SEC faces setbacks but continues its aggressive crackdown on the crypto industry

Join our free newsletter for daily crypto updates!