Curve Finance moves to new domain after DNS attack exposes security risks

Curve Finance is moving permanently to a caller web domain pursuing a targeted DNS onslaught that exposed users to phishing risks.

On May 13, the DeFi protocol confirmed that it volition run connected Curve.finance, replacing the compromised Curve.fi.

The protocol explained that it was making the determination due to the fact that of the prolonged downtime and constricted enactment from .fi domain registrars.

It stated:

“[The] .fi [domain] volition beryllium down for excessively agelong / nary constituent of moving back. Also registrars who tin clasp .fi are somewhat not arsenic large arsenic those who tin woody with .finance.”

On May 12, hackers hijacked the DNS records for Curve.fi, redirecting visitors to a malicious website that mimicked the protocol’s interface. This fake tract attempted to instrumentality users into signing wallet-draining transactions.

Following the incident, Curve said that the contented was contained astatine the DNS level and that nary interior systems were breached.

However, the compromised website was near connected for respective hours arsenic the domain registrar, iwantmyname, failed to respond to assemblage complaints.

Curve said:

“[The registrar’s] effect clip is wholly unacceptable: we request entree to curve [.] fi taken distant from hackers and the incidental to beryllium investigated.”

Speaking connected this, Yu Xian, the laminitis of blockchain information steadfast Slowmist, highlighted the hazard that the contented could person caused, noting that:

“The phishing pack [was] playing soiled tricks astatine the beforehand extremity with fake wallet pop-up scams, straight sportfishing for mnemonic phrases… I person to say, this is beauteous sleazy.”

The compromised domain sanction has been frozen since the attack.

Curve’s information challenges

In 2022, the protocol suffered a akin DNS hijack, which led to idiosyncratic losses totaling astir $530,000. Notably, the steadfast was utilizing the aforesaid registrar, iwantmyname, astatine the clip of the attack.

Meanwhile, the caller DNS onslaught comes conscionable implicit a week aft a abstracted information lawsuit successful which a hacker temporarily took implicit Curve’s X account.

On May 5, a hacker took implicit the platform’s societal media grip to station phishing links. The squad regained power of the relationship rapidly and said nary idiosyncratic funds were impacted.

Meanwhile, information experts emphasized that the back-to-back incidents amusement that attackers are shifting absorption from codification exploits to infrastructure-based vulnerabilities.

This year, the crypto manufacture has mislaid astir $2 cardinal to malicious actors who person exploited centralized exchanges similar Bybit and several DeFi protocols.

The station Curve Finance moves to caller domain aft DNS onslaught exposes information risks appeared archetypal connected CryptoSlate.