Websites providing the frontends for some popular defi services, including Compound Finance, were compromised and replaced with <button class="define-target" id="drainer">wallet drainers</button>: websites resembling the usual frontend, but which drain unsuspecting users' wallets when used.<p>Somewhat ironically, the "Unstoppable Domains" web3 domain service was also impacted, and their site was offline for a while before they regained control.</p><p>The hijacking appears to be thanks to an attack on Squarespace's domain registry. Crypto founder Bobby Ong has suggested that the attack is affecting domains acquired through Google Domains, which sold its business to Squarespace several months ago. "Tthe forced migration of domains to Squarespace removed 2FA causing all these domains to be vulnerable and several have been hijacked," he wrote. "Best thing to do is to not interact with crypto and rest for the next couple of days until everything is resolved."</p><p>Web2 is going just great!</p>

"More Than 220 DeFi Protocols Still 'at Risk' From Squarespace DNS Hijack"

Archived tweet

Tweet by Bobby Ong: