DeFi websites hijacked in domain registrar attack, $138k stolen

DeFi websites hijacked — Hackers have hijacked a dozen DeFi websites, all registered through the domain service Name.com, stealing approximately $138,000 from users.

According to registry records reviewed by The Block, the attack appears to have originated from a compromise at the domain registrar level, rather than individual protocol breaches. The hijacked domains were redirected to malicious sites designed to drain cryptocurrency from visitors’ wallets.

The incident highlights a growing attack vector in the crypto space, where targeting domain registrars can compromise multiple projects at once. Security researchers have repeatedly warned that centralized points of failure, like domain registration, present significant risks for decentralized applications.

While the exact list of affected projects was not fully disclosed, such attacks typically involve cloning legitimate front-end websites to trick users into approving fraudulent transactions. The stolen funds, totaling around $138,000, represent a direct loss to users who interacted with the compromised sites.