- Curve.Exchange uses a different domain name system provider and seems to be unaffected
- Twitter account foobar claimed at about 4:30 pm ET that roughly $570,000 worth of tokens had been stolen so far
The main website of decentralized digital asset exchange Curve Finance has been compromised in what appears to be the latest instance of a nefarious crypto exploit.
“If you have approved any contracts on Curve in the past few hours, please revoke immediately,” it wrote.
The firm warned users it’s looking into an apparent nameserver attack, saying its website should be avoided. It wasn’t immediately clear whether any funds had been compromised.
In a subsequent tweet, Curve said that Curve.Exchange uses a different domain name system provider and seems to be unaffected, though noted that users still “need to proceed with caution.”
Curve urged domain registrar iwantmyname to “please do something” at 5:22 pm ET.
“We switched nameserver, but don’t rush to use http://curve.fi – wait a bit,” the decentralized exchange added.
The incident comes after a hacker produced a phishing pop-up on Polygon and Fantom last month warning users their funds were at risk and urging them to enter their private account keys.
That hacker accessed Polygon and Fantom’s remote procedure call (RPC) interfaces through the Web3 infrastructure platform Ankr by tricking a third party domain name system (DNS) provider into giving the hacker access to Polygon and Fantom’s domains.
Garatzen ari den istorioa da.
Updated Aug. 9, 2022, 5:52 pm
Lortu zure sarrera-ontzira arratsaldero bidaltzen dituzun eguneko kriptografiako albiste eta informazio nagusiak. Harpidetu Blockworks-en doako buletinera orain.