The Domain Name Server (DNS) of the decentralized staking platform, Convex Finance, was targeted in the latest spoofing exploit.
- Angel investor Alexintosh first פלאַגד that Convex Finance was asking for user approval to an unverified smart contract address on July 23rd.
- This suggested that a malicious entity may have sneaked into Convex Finance’s website to carry out a DNS spoofing attack.
- Following the incident, the staking platform באשטעטיקט the hijack of its DNS that led users to unassumingly approve malicious contracts for some interactions on the website.
- Convex then מודיע setting up two alternative domain names and asked users to use these URLs to interact with the site while they conduct the investigation.
- The platform marked five wallets affected by the exploit. The team, however, revealed that funds on verified contracts were not affected.
- The exploiter sent the stolen funds to a “Convex Phisher Deposits” flagged wallet flagged that shows a small amount of crypto from the affected users before moving most of it to the coin mixer, Tornado Cash, to hide the tracks.
- Convex Finance said that it will publish a detailed post-mortem report soon.
- Furthermore, a crypto tracking and compliance platform MistTrack גילוי that Ribbon Finance, a decentralized structured products protocol, also suffered a DNS hijacking attack, wherein a victim reportedly lost 16.5 WBTC. On-chain analysis suggests that it was the same attacker as Convex.
Binance Free $ 100 (ויסשליסיק): ניצן דעם לינק צו פאַרשרייַבן און באַקומען $ 100 פריי און 10% אַוועק פיז אויף Binance Futures ערשטער חודש (טנאָים).
פּרימעקסבט ספּעציעלע פאָרשלאָג: ניצן דעם לינק צו פאַרשרייַבן און אַרייַן POTATO50 קאָד צו באַקומען אַרויף צו $ 7,000 אויף דיין דיפּאַזאַץ.
Source: https://cryptopotato.com/convex-finance-launches-two-urls-after-spoofing-exploit/