Curve Finance DNS exploit resolved – how to check if it is safe to use

2022-8-11 22:44

Over $530k was stolen from Curve Finance Tuesday after a hacker was able to take control of the nameserver to reroute the DNS to a malicious server. The front end of the Curve website was cloned to trick users into believing they were interacting with a legitimate site.

On the surface, the SSL certificate, domain name, and website content were identical to the real version of the site, giving users little chance to identify the exploit. The correct IP for Curve’s server has been released and information on how to check this can be found at the end of this article.

Don't use the frontend yet. Investigating! https://t.co/8kmtpGsLQQ

— Curve Finance (@CurveFinance) August 9, 2022

Within an hour, Curve had updated its Twitter account to pinpoint the malicious contract that should be revoked from all users’ wallets. The update followed a statement confirming that the platform had “found and reverted” the issue.

The issue has been found and reverted. If you have approved any contracts on Curve in the past few hours, please revoke immediately. Please use https://t.co/6ZFhcToWoJ for now until the propagation for https://t.co/vOeMYOTq0l reverts to normal

— Curve Finance (@CurveFinance) August 9, 2022

As of 7 PM GMT on August 10, Curve advises users to take additional precautions when interacting with its dApp. The issue has been resolved, but not all DNS records have been updated worldwide at this time. Users who understand how to verify an IP are safe to use the platform; others should use curve.exchange in the meantime.

We'll tweet when we're certain that ALL DNS records on all NS servers in the world are entirely up to date and the https://t.co/vOeMYOTq0l address is definitely safe to use https://t.co/kfODENPHFS

— Curve Finance (@CurveFinance) August 10, 2022

Tether’s CTO Paolo Ardoino commented on the hack Wednesday afternoon to state,

“This attack demonstrates once again that the ingenuity of hackers presents a near and ever-present danger to our industry… We applaud Curve for its ability to be able to pinpoint the source of the hack, and speedily act. This is exactly how a protocol should react during a time when customers’ funds are at risk.”

How to check if curve.fi resolves to the correct server

For those wishing to use Curve Finance the following methods can be used to check how the IP address resolves at your location.

Windows Press “Windows + R” In the Run dialogue box, type “cmd” and hit enter A window will open, and it in type “ping curve.fi” The result should return the IP address “76.76.21.21” If it does, then your current internet connection is resolving to the correct server for the domain Mac Press “Cmd + Space” Type “terminal” and open the “Terminal” app A window will open, and it in type “ping curve.fi” The result should return the IP address “76.76.21.21” If it does, then your current internet connection is resolving to the correct server for the domain

However, in an abundance of caution, users are still advised to use curve.exchange until the Curve team releases a further update to confirm all DNS records have propagated.

The post Curve Finance DNS exploit resolved – how to check if it is safe to use appeared first on CryptoSlate.

Similar to Notcoin - Blum - Airdrops In 2024

origin »

Curve DAO Token (CRV) на Currencies.ru

$ 0 (+0.00%)
Объем 24H $0
Изменеия 24h: 0.00 %, 7d: 0.00 %
Cегодня L: $0 - H: $0.5856
Капитализация $0 Rank 99999
Цена в час новости $ 1.4005 (-100%)

curve finance dns safe use resolved exploit

curve finance → Результатов: 126


Curve Finance представляет новые контракты на дефинансированное кредитование

Планы расширения децентрализованного финансирования (DEFI) Curve Finance подчеркивают развертывание новых кредитных контрактов, позволяющих арбитражным трейдерам извлекать выгоду из прибыльных торговых возможностей.

2024-2-27 04:58


Взломавший Curve Finance хакер начал возвращать украденные средства

Злоумышленник, стоящий за кражей криптоактивов из протокола DeFi Curve Finance, а также проектов Metronome и Alchemix, вернул часть украденных средств после переговоров.

2023-8-8 12:38


Curve Finance собирается запустить стейблкоин, привязанный к доллару США

Разработчики популярной платформы для обмена стейблкоинами Curve Finance разметили библиотеку кода для смарт-контрактов будущего стейблкоина crvUSD.

2022-9-7 15:43


Проект Equilibrium создаст версию DeFi-проекта Curve Finance на базе Polkadot

Платформа Equilibrium начала работу над имплементацией Curve Finance на базе Polkadot. «Equilibrium будет сотрудничать с Curve Finance, чтобы предоставить пользователям платформы и экосистеме Polkadot версию автоматизированного маркетмейкера Curve на базе [simple_tooltip content='Фреймворк, разработанный директором Parity Technologies Гэвином Вудом.

2021-2-11 13:25


Фото:

Андре Кронье анонсировал сотрудничество DeFi-протоколов Curve и yEarn.Finance

Создатель yEarn. Finance Андре Кронье поздравил свой проект и Curve с годовщиной и заявил о готовящейся коллаборации двух DeFi-протоколов. Yes. Finalizing currently.

2021-1-11 16:20


Фото:

Объем заблокированной стоимости в DeFi-протоколе Aave превысил $1 млрд

Лендинговый протокол Aave вышел на второе место рейтинга DeFi Pulse. Объем заблокированных на его смарт-контрактах средств за сутки вырос на 19,26%, превысив отметку в $1 млрд. На скриншоте ниже видно, что Aave потеснил некастодиальную торговую площадку Curve Finance и некогда лидировавший проект Compound.

2020-8-15 20:09


DeFi’s Explosive Growth Curve Hits Nearly $12B Market Cap, As Yield Farming Frenzy Continues

The decentralized finance (DeFi) ecosystem is blooming as both the total market capitalization and total value locked (TVL) on these platforms, set record highs over the weekend. The market cap of DeFi-based tokens is nearing an impressive $12 billion mark after an explosive 62% weekly increase in Chainlink (LINK) price, which set an all-time high […]

2020-8-10 15:34