Frax Finance Suffers DNS Spoofing Attack

Summary
On the morning of November 1, Frax Finance’s website was reportedly subjected to a DNS spoofing attack. The project has since issued warnings to its users.

Key Highlights
Please don’t use https://t.co/cADe5RLjqv and https://t.co/AcTF8hlzaS domains until further notice.
— Frax Finance ¤⛓️¤ (@fraxfinance) October 31, 2023
If you know anyone at @namedotcom please reach out asap. https://t.co/v0KlM5FoLk
- DNS Spoofing Attack: The homepage of Frax Finance appears to have been compromised via a DNS spoofing attack. The incident was shared by founder Sam Kazemian and the official Frax Finance Twitter account.
- User Warnings: The project has advised users to refrain from using Frax Finance products until further notice. Efforts are underway to communicate with domain name service provider Name dot com.
- Potential Domain Theft: Preliminary information suggests that the project’s domain name may have been stolen, leading to the DNS spoofing attack.
Project Updates
As of now, Frax Finance has not provided detailed updates on the specifics of the attack or the extent of the damage. The project has reiterated the importance of avoiding product usage until more information is available.
Market Reaction
The price of Frax’s token, FXS, showed minimal reaction to the news of the DNS attack. However, it did experience a slight adjustment on the evening of October 31.

1-hour chart of FXS/USDT on Binance as of 09:50 AM, November 1, 2023
Context and Background
DNS spoofing attacks are not uncommon in the DeFi space. Previous victims of such attacks include Balancer, Curve Finance, Ankr, and Celer Network.
Latest Update
In a recent tweet, Frax Finance mentioned that efforts to recover their domain names are in progress. The project also promised to provide a detailed explanation of the incident by tomorrow.
https://t.co/gnEI5kjDki has reached out & confirmed https://t.co/cADe5RLjqv & https://t.co/AcTF8hlzaS domains are now routed back to their proper nameservers & configuration. We’ve been told they’ll explain what led to the incident after they conduct a full investigation tomorrow https://t.co/h1eE11P5wZ
— Frax Finance ¤⛓️¤ (@fraxfinance) November 1, 2023
Frax Finance’s tweet regarding the recovery of domain names and future updates
Conclusion
The DNS spoofing attack on Frax Finance underscores the importance of robust security measures in the DeFi space. Users are urged to stay vigilant and await further instructions from the Frax Finance team. For more updates on this and other developments, follow Coin68 on Google News.