DeFi platforms PancakeSwap, Cream Finance hit by domain name system hijacks
March 15, 2021, 12:57PM EDT
2 min read
UPDATE: Cream Finance announced on Twitter that it has regained control of its DNS. "These sites are now safe to use. Thank you for your patience as we are [sic] continue to monitor this situation," the project team said.
DeFi platforms PancakeSwap and Cream Finance warned users on Monday that they were hit by domain name system (DNS) hijackings.
The strong warnings were issued on social media in a bid to keep users from falling victim to dual schemes to collect private keys or seed phrases from would-be victims. Such information obtained by this kind of phishing scheme would then allow a hacker to then steal funds from affected users.
Your funds are only at risk if you enter your private key or seed phrase into the hijacked site.
Regaining access is only a matter of time, our main priority is keeping inexperienced users safe.
As of press time, PancakeSwap has said that it has regained access to its DNS. Cream Finance appeared to be in the process of seeking DNS access, pointing users toward an alternative address in the meantime.
A DNS hijacking allows an attacker to present a fraudulent web portal to visiting users, often aimed at collecting personal information -- in this case, the private keys needed to steal their funds. The U.S. government and private security firms have issued warnings in recent years about such attacks, as noted in a 2019 report by Krebs On Security.
This is a developing story and will be updated as new information becomes available.
The Block Research was commissioned by Algorand to create Layer-1 Platforms: A Framework for comparison, which provides a “look under the hood” at seven platforms: Algorand, Avalanche, Binance Smart Chain, Cosmos, Ethereum/Ethereum 2.0, Polkadot, and Solana.
We assess their technical design, related ecosystem data, and qualitative factors such as key ecosystem members to get an understanding of how they differ. Having done this analysis, we draw some insights for what the future of the broader smart contract landscape could look like for years to come.