Altszn.com
  • Home
  • Crypto
    • Altcoins
    • Bitcoin
    • Ethereum
    • Monero
    • XRP
    • Zcash
  • Web3
  • DeFi
  • NFTs
No Result
View All Result
Altszn.com
  • Home
  • Crypto
    • Altcoins
    • Bitcoin
    • Ethereum
    • Monero
    • XRP
    • Zcash
  • Web3
  • DeFi
  • NFTs
No Result
View All Result
Altszn.com
No Result
View All Result

More Than 120 DeFi Front-End Could Be Vulnerable To DNS Attacks

Altszn.com by Altszn.com
July 13, 2024
in Web3
0
More Than 120 DeFi Front-End Could Be Vulnerable To DNS Attacks
399
SHARES
2.3k
VIEWS
Share on FacebookShare on Twitter



The migration of Google’s domain registrar to Squarespace resulted in more than 120 DeFi domains becoming vulnerable to DNS attacks.

The web2 infrastructure underpinning web3 front-end interfaces continues to pose risks to users.

Experts are urging web3 users to avoid interacting with the front-end interfaces of DeFi protocols after domain migrations associated with Squarespace’s acquisition of Google’s domain business left many websites vulnerable to domain name server (DNS) attacks.

On July 11, the front-end domains for Compound Finance, Pendle Finance, and Celer Network were targeted after the migration resulted in the two-factor authentication (f2a) securing websites previously managed by Google was deactivated. Compound, Pendle, and Celer each tweeted that their domains have since been secured.

“A DNS attack is going on right now affecting Squarespace domain registrar,” tweeted Bobby Ong, the co-founder of CoinGecko. “Best thing to do is to not interact with crypto and rest for the next couple of days until everything is resolved.

0xngmi of DeFi Llama shared a list of more than 120 DeFi domains that could be vulnerable to the attack. “This is a list of all domains that share this registrar so they could be at risk of being hacked,” they said.

Front-end user interfaces (UIs) allow users to interact with DeFi protocols via a typical graphical UI hosted via a web domain. While DeFi projects’ front-ends may be vulnerable, the incident has not impacted underlying web3 back-end protocols — which facilitate server-side operations, databases, and application logic.

Domain migration

In June 2023, Google sold its domain business to Squarespace. However, the websites were not migrated from Google to Squarespace until two days ago on July 10.

It appears that domain owners were not aware that their 2fa would be disabled as part of the transition, exposing numerous domains to potential DNS attacks. Attackers were able to redirect the DNS records of popular DeFi front-end websites to malicious addresses hosting wallet drainers and phishing attacks.

“From initial assessment, it appears that the attackers are operating by hijacking DNS records of projects hosted on SquareSpace,” tweeted Blockaid, a web3 security firm. “The attackers are using a drainer kit associated with the most recent iteration of the Inferno drainer group.”

Inferno Drainer is designed to trick unsuspecting users into approving malicious transactions that transfer a victim’s funds to the hacker’s wallet.

“Our bot detected that a new malicious DNS record was added to redirect Pendle’s dApp to a malicious site,” Pendle tweeted.

According to CertiK, phishing attacks accounted for nearly $498 million worth of losses to crypto exploits during the first half of 2024, equating to 72% of the $688 million lost to all forms of attacks combined.

Squarespace did not respond to The Defiant’s request for comment at the time of publishing.

Related: Bittensor Halts Network After Users Fall Victim To Malicious Python Software



Read More: thedefiant.io

Tags: AttacksDeFiDNSfrontendVulnerableweb 3.0Web3
ADVERTISEMENT

Recent

Carmaker DeLorean tokenizes EV reservations on Sui

Carmaker DeLorean tokenizes EV reservations on Sui

May 22, 2025
Semiconductor exemptions don’t matter when it comes to tariffs

Semiconductor exemptions don’t matter when it comes to tariffs

May 22, 2025
‘You don’t own enough crypto, NFTs’

‘You don’t own enough crypto, NFTs’

May 22, 2025

Categories

  • Bitcoin (4,718)
  • Blockchain (11,157)
  • Crypto (9,094)
  • Dark Web (510)
  • DeFi (8,274)
  • Ethereum (4,760)
  • Metaverse (7,236)
  • Monero (271)
  • NFT (1,322)
  • Solana (4,987)
  • Web3 (20,364)
  • Zcash (491)

Category

Select Category

    Advertise

    Advertise your site, company or product to millions of web3, NFT and cryptocurrency enthusiasts. Learn more

    Useful Links

    Advertise
    DMCA
    Contact Us
    Privacy Policy
    Shipping & Returns
    Terms of Use

    Resources

    Exchanges
    Changelly
    Web3 Jobs

    Recent News

    Carmaker DeLorean tokenizes EV reservations on Sui

    Carmaker DeLorean tokenizes EV reservations on Sui

    May 22, 2025
    Semiconductor exemptions don’t matter when it comes to tariffs

    Semiconductor exemptions don’t matter when it comes to tariffs

    May 22, 2025

    © 2022 Altszn.com. All Rights Reserved.

    No Result
    View All Result
    • Home
      • Home – Layout 1
      • Home – Layout 2
      • Home – Layout 3

    © Altszn.com. All Rights Reserved.

    • bitcoinBitcoin (BTC) $ 111,349.00
    • ethereumEthereum (ETH) $ 2,652.55
    • tetherTether (USDT) $ 1.00
    • xrpXRP (XRP) $ 2.42
    • bnbBNB (BNB) $ 680.15
    • solanaSolana (SOL) $ 178.63
    • usd-coinUSDC (USDC) $ 0.999818
    • dogecoinDogecoin (DOGE) $ 0.240203
    • cardanoCardano (ADA) $ 0.801437
    • tronTRON (TRX) $ 0.276603
    • staked-etherLido Staked Ether (STETH) $ 2,650.75
    • wrapped-bitcoinWrapped Bitcoin (WBTC) $ 111,183.00
    • suiSui (SUI) $ 3.88
    • wrapped-stethWrapped stETH (WSTETH) $ 3,194.07
    • chainlinkChainlink (LINK) $ 16.74
    • hyperliquidHyperliquid (HYPE) $ 32.76
    • avalanche-2Avalanche (AVAX) $ 25.16
    • stellarStellar (XLM) $ 0.300687
    • shiba-inuShiba Inu (SHIB) $ 0.000015
    • bitcoin-cashBitcoin Cash (BCH) $ 435.75
    • hedera-hashgraphHedera (HBAR) $ 0.203409
    • leo-tokenLEO Token (LEO) $ 8.86
    • the-open-networkToncoin (TON) $ 3.15
    • litecoinLitecoin (LTC) $ 98.94
    • polkadotPolkadot (DOT) $ 4.93
    • wethWETH (WETH) $ 2,654.05
    • moneroMonero (XMR) $ 396.83
    • usdsUSDS (USDS) $ 0.999769
    • wrapped-eethWrapped eETH (WEETH) $ 2,833.94
    • bitget-tokenBitget Token (BGB) $ 5.22
    • pepePepe (PEPE) $ 0.000014
    • binance-bridged-usdt-bnb-smart-chainBinance Bridged USDT (BNB Smart Chain) (BSC-USD) $ 1.00
    • pi-networkPi Network (PI) $ 0.815645
    • ethena-usdeEthena USDe (USDE) $ 1.00
    • coinbase-wrapped-btcCoinbase Wrapped BTC (CBBTC) $ 111,228.00
    • whitebitWhiteBIT Coin (WBT) $ 31.90
    • bittensorBittensor (TAO) $ 474.12
    • aaveAave (AAVE) $ 255.44
    • uniswapUniswap (UNI) $ 6.42
    • nearNEAR Protocol (NEAR) $ 3.05
    • daiDai (DAI) $ 0.999882
    • aptosAptos (APT) $ 5.67
    • jito-staked-solJito Staked SOL (JITOSOL) $ 214.89
    • ondo-financeOndo (ONDO) $ 1.01
    • okbOKB (OKB) $ 52.71
    • official-trumpOfficial Trump (TRUMP) $ 15.57
    • kaspaKaspa (KAS) $ 0.117447
    • internet-computerInternet Computer (ICP) $ 5.63
    • ethereum-classicEthereum Classic (ETC) $ 19.69
    • crypto-com-chainCronos (CRO) $ 0.100227
    • bitcoinBitcoin (BTC) $ 111,349.00
    • ethereumEthereum (ETH) $ 2,652.55
    • tetherTether (USDT) $ 1.00
    • xrpXRP (XRP) $ 2.42
    • bnbBNB (BNB) $ 680.15
    • solanaSolana (SOL) $ 178.63
    • usd-coinUSDC (USDC) $ 0.999818
    • dogecoinDogecoin (DOGE) $ 0.240203
    • cardanoCardano (ADA) $ 0.801437
    • tronTRON (TRX) $ 0.276603
    • staked-etherLido Staked Ether (STETH) $ 2,650.75
    • wrapped-bitcoinWrapped Bitcoin (WBTC) $ 111,183.00
    • suiSui (SUI) $ 3.88
    • wrapped-stethWrapped stETH (WSTETH) $ 3,194.07
    • chainlinkChainlink (LINK) $ 16.74
    • hyperliquidHyperliquid (HYPE) $ 32.76
    • avalanche-2Avalanche (AVAX) $ 25.16
    • stellarStellar (XLM) $ 0.300687
    • shiba-inuShiba Inu (SHIB) $ 0.000015
    • bitcoin-cashBitcoin Cash (BCH) $ 435.75
    • hedera-hashgraphHedera (HBAR) $ 0.203409
    • leo-tokenLEO Token (LEO) $ 8.86
    • the-open-networkToncoin (TON) $ 3.15
    • litecoinLitecoin (LTC) $ 98.94
    • polkadotPolkadot (DOT) $ 4.93
    • wethWETH (WETH) $ 2,654.05
    • moneroMonero (XMR) $ 396.83
    • usdsUSDS (USDS) $ 0.999769
    • wrapped-eethWrapped eETH (WEETH) $ 2,833.94
    • bitget-tokenBitget Token (BGB) $ 5.22
    • pepePepe (PEPE) $ 0.000014
    • binance-bridged-usdt-bnb-smart-chainBinance Bridged USDT (BNB Smart Chain) (BSC-USD) $ 1.00
    • pi-networkPi Network (PI) $ 0.815645
    • ethena-usdeEthena USDe (USDE) $ 1.00
    • coinbase-wrapped-btcCoinbase Wrapped BTC (CBBTC) $ 111,228.00
    • whitebitWhiteBIT Coin (WBT) $ 31.90
    • bittensorBittensor (TAO) $ 474.12
    • aaveAave (AAVE) $ 255.44
    • uniswapUniswap (UNI) $ 6.42
    • nearNEAR Protocol (NEAR) $ 3.05
    • daiDai (DAI) $ 0.999882
    • aptosAptos (APT) $ 5.67
    • jito-staked-solJito Staked SOL (JITOSOL) $ 214.89
    • ondo-financeOndo (ONDO) $ 1.01
    • okbOKB (OKB) $ 52.71
    • official-trumpOfficial Trump (TRUMP) $ 15.57
    • kaspaKaspa (KAS) $ 0.117447
    • internet-computerInternet Computer (ICP) $ 5.63
    • ethereum-classicEthereum Classic (ETC) $ 19.69
    • crypto-com-chainCronos (CRO) $ 0.100227