DeFi
DeFi Apps Targeted in Apparent Squarespace DNS Registry Attack: Blockaid — TradingView News
Several decentralized finance (DeFi) applications were targeted by a domain registry attack on July 11, according to a blog post published on X by blockchain security platform Blockaid. The attacker took control of Compound Finance’s DNS registry and attempted, unsuccessfully, to take control of Celer Network’s registry.
After a preliminary investigation, Blockaid concluded that the attacker is targeting domain names provided by Squarespace, potentially putting any DeFi application with a Squarespace domain at risk.Cointelegraph
Security researchers became aware of the attack when compound.finance’s Compound interface began redirecting to a malicious website. The malicious site was equipped with a scraping application that attempted to steal users’ tokens.