Ethereum

Bank

Toad

Turbo

Cosmos

The website for crypto exchange dYdX’s version 3.0 has been “compromised,” according to a July 23 social media post from the exchange’s team. However, the team stated that version 4.0 on Cosmos has not been compromised and is functioning normally. Users are being warned that they should not “visit the website [for v3] or click any links until further notice.”
The user interface for dYdX v3 is located at dydx.exchange.&nbsp;
<figure data-ct-non-breakable="true">
 <img src="https://s3.cointelegraph.com/uploads/2024-07/329721e1-8164-41ce-98f5-6589e46f9c63.png" alt="dYdX v3 compromised in an apparent DNS attack" title="">
 <figcaption style="text-align: center;">
 Source: <a href="https://x.com/dYdX/status/1815780835473129702" target="_blank" rel="noopener nofollow">dYdX</a>
 </figcaption>
</figure>
dYdX has <a href="https://x.com/dYdX/status/1815791754756423773" target="_blank" rel="noopener nofollow">confirmed</a> that the app’s smart contracts have not been compromised. Only the user interface is affected, so funds currently deposited should not be at risk, and the site should not be used to attempt withdrawals.
Related: <a href="https://cointelegraph.com/news/dydx-moves-to-cosmos-based-blockchain-for-v4-to-optimize-decentralization-and-trading-flow">dYdX moves to Cosmos-based blockchain for v4 to optimize decentralization</a>
Cointelegraph journalists attempted to connect to the compromised website with a test Ethereum account that held no balance. In response, the site produced an error stating, “Your wallet is not eligible. Something went wrong. Please try again with an active wallet.”
<figure data-ct-non-breakable="true">
 <img src="https://s3.cointelegraph.com/uploads/2024-07/9de198d1-b1d5-48f1-958e-f6cb9eee7f8f.png" alt="dYdX v3 compromised in an apparent DNS attack" title="">
 <figcaption style="text-align: center;">
 dYdX hacked site error message. Source: dydx.exchange
 </figcaption>
</figure>
A similar error message was shown in a fake Collab.land phishing scam that a victim <a href="https://cointelegraph.com/news/new-scam-drains-wallets-without-user-approving-transaction">reported to Cointelegraph in February</a>. This earlier scam appeared to check the user’s wallet balance once it was connected to the site. If the wallet did not have a balance, the user was told to try again with an “active wallet.” 
If the user then connected with a wallet that held funds, they were presented with a signature request. If they signed this request, their account was drained.
The hacked version of the dYdX website appears to work in a similar way.
At the time of publication, the team has not provided further details as to how the attacker was able to gain control of the app’s domain name. But domain name service (DNS) hijacking attempts against Web3 protocols have become common recently. 
On July 11, both Compound Finance and Celer Network <a href="https://cointelegraph.com/news/defi-apps-targeted-squarespace-dns-registry-attack-blockaid">were targeted in a DNS attack</a>, and the attacker successfully redirected Compound’s website to a malicious website that attempted to drain tokens.
Magazine:&nbsp;<a href="https://cointelegraph.com/magazine/crypto-sec-turbo-toad-phishing-attack-and-evolve-data-breach/">Crypto-Sec: Evolve Bank suffers data breach, Turbo Toad enthusiast loses $3.6K</a>

dYdX v3 compromised in an apparent DNS attack

Cointelegraph

Other articles published on Jul 23, 2024

Marathon Digital Pays $139 Million Fine In Contract Breach, MARA Stock Tanks 2.5%

Anthony Pompliano Shifts Focus To Solana From Ethereum, Here’s Why

Multipool Secures Strategic Investment from Industry Giant Kronos Research

What will a Kamala Harris win mean for America’s economy?

These are the Top Cryptocurrency Picks for H2 2024: Bitcoin, Ethereum, and WW3 Shiba

Bitwise Ethereum ETF to Donate 10% of Profits to Developers

Join our free newsletter for daily crypto updates!