Decentralized cross-chain protocol Frax Finance's domain was hijacked early Wednesday, but the team behind the project has gotten it back under their control with help from their domain registrar.
Domain Name System (DNS) hijacking occurs when the domain name registrar redirects users to a malicious site that looks exactly like the authentic one to phish users into giving up their credentials.
This type of attack is increasingly common in crypto. In 2022, the decentralized finance (DeFi) project Convex Finance had to set up new website addresses after its original URLs were taken over and misdirected users to malicious sites.
So far, no user funds have been stolen by the attacker.
Earlier, Kazemian told CoinDesk that his team is in the dark about what happened, and it doesn’t seem to be a compromised email or password.
"It doesn’t seem like we did anything wrong at all. So until they tell us the account is secure, it’s not possible for us to say it’s safe," Kazemian said.
Name.com hasn’t responded to a request for comment from CoinDesk but told Kazemian and the Frax team that they'll be conducting a full investigation into what exactly happened.
UPDATE (Nov. 1, 06:01 UTC): Updates with statement from Frax.
The leader in news and information on cryptocurrency, digital assets and the future of money, CoinDesk is an award-winning media outlet that strives for the highest journalistic standards and abides by a strict set of editorial policies. In November 2023, CoinDesk was acquired by Bullish group, owner of Bullish, a regulated, institutional digital assets exchange. Bullish group is majority owned by Block.one; both groups have interests in a variety of blockchain and digital asset businesses and significant holdings of digital assets, including bitcoin. CoinDesk operates as an independent subsidiary, and an editorial committee, chaired by a former editor-in-chief of The Wall Street Journal, is being formed to support journalistic integrity.