On Tuesday, 9th August, Curve Finance suffered from a DNS attack causing theft of a whooping $570,000+ USD.
Curve Finance is a stablecoin decentralized exchange (DEX) that runs on the Ethereum blockchain.
The attacker targeted the front end where the suspected hacker appears to have changed the domain name system (DNS) entry for the protocol, forwarding users to a fake clone website and approving a malicious contract. The program’s contract remained uncompromised, however.
The team behind the protocol noticed the issue and tweeted to warn the users about the exploit.
A few hours after the exploit Curve again tweeted confirming both that they have found the issue and also reverted it. They also asked the user to immediately revert any contract they have approved on Curve prior.
Curve explained that it was most likely that the DNS server provider Iwantmyname was hijacked. On the other hand, the exploit was going on, Twitter user LefterisJP speculated that the alleged attacker had likely utilized DNS spoofing to execute the exploit on the service.
Other users quickly noticed and tweeted to warn the users that the alleged thief appears to have stolen more than $573,000 USD.
Also read,
Cream Finance Hack: What Motivates Hackers To Return Stolen Funds?
To mitigate the risks and vulnerabilities in smart contracts and ensure the integrity of your…
Lately, there's been a lot of talk about Web3 spaces, and one of the terms…
Tldr: EigenLayer is a generalized middleware protocol built on top of ethereum that introduces a…
The Dencun upgrade, a hard fork in Ethereum Blockchain implemented on March 13, 2024, is…
The Real Web 3.0! The Dark Forest of blockchains & DeFi, the forest's heart is…
EIP-6963 is going to be a game changer in the user’s experience of interacting with…
This website uses cookies.