DeFi
DNS hijacking attack targets multiple DeFi protocols
Full summary
- Several DeFi protocols, including Compound Finance and Celer Network, were targeted by a DNS hijacking attack.
- The attack appears to target domains registered through Squarespace.
- More than 220 DeFi protocol frontends could still be at risk.
- The attackers are believed to be using the Inferno Drainer wallet kit to steal funds.
- Some security measures, such as requiring wallet signatures for DNS updates, have been suggested to prevent future attacks.
On July 11, 2024, several decentralized finance (DeFi) protocols were hit by a DNS hijacking attack. The incident affected major players in the crypto spaceincluding Compound Finance and Celer Network.
Security experts believe the attack targets domains registered through Squarespace, a popular website building and hosting platform.
The attack was first noticed when users reported that the Compound Finance website (compound.finance) was redirecting to a malicious page.
The fake page contained a “drainer” application designed to steal users’ cryptocurrency tokens. Shortly after, Celer Network announced that it had also been targeted, but its domain monitoring system detected the attack before it was successful.
Blockchain security firm Blockaid is closely monitoring the situation. According to Ido Ben-Natan, Blockaid’s co-founder and CEO, the attackers targeted DNS records hosted on Squarespace. These records were redirected to IP addresses known for malicious activity.
⚠️ Developing situation – Several DeFi front-ends are at risk of being hacked, with a few incidents having already occurred, with projects like @compoundfinance And @CelerNetwork hacked in the last 24 hours.
We will update this thread with details as they become available. pic.twitter.com/iWQR0ByIgB
— Blockaid (@blockaid_) July 11, 2024
Ben-Natan said that while the full extent of the hack is not yet known, approximately 228 DeFi protocol interfaces could still be at risk.
The attack is believed to be the work of a group known as Inferno Drainer. This group has been active for some time, targeting various DeFi protocols and exploiting different vulnerabilities.
Their wallet kit allows cybercriminals to trick users into signing malicious transactions, giving the attackers control of their digital assets.
Security researchers have identified shared infrastructure used by the Inferno Drainer group, making it easier to track and identify associated attacks.
Blockaid has worked closely with the crypto community to maintain an open channel for reporting compromised sites.
The incident has sparked discussions about improving security measures for DeFi protocols. Matthew Gould, founder of Web3 domain provider Unstoppable Domains, suggested creating verified on-chain records for domains. This would add an extra layer of protection for browsers and other systems to verify, helping to reduce the risk of DNS attacks.
Gould also proposed a new feature where DNS updates would require a signature from the user’s wallet. This would make it much harder for hackers, as they would have to compromise the registrar and the user’s wallet separately.
In response to the attack, several cryptocurrency projects and platforms have taken action. MetaMask, a popular Web3 wallet, announced that it was working to warn users of potentially compromised applications associated with the attack.
Users attempting to make a transaction on a site known to be involved in the current attack will see a warning provided by Blockaid.
For those of you using MetaMask, you will see a warning provided by @blockaid_ if you attempt to make a transaction on a known site involved in this current attack. #mmsecurity https://t.co/Fk0sAjaeit
— MetaMask ???????? (@MetaMask) July 11, 2024
The crypto community has stepped up to raise awareness and minimize potential damage. DefiLlama developer 0xngmi shared a list of over 100 DeFi protocols that could be affected by the attack, including well-known names like Pendle Finance, dYdX, Polymarket, and LooksRare.
DeFi
Pump.Fun is revolutionizing the Ethereum blockchain in terms of daily revenue
The memecoin launchpad saw the largest daily revenue in all of DeFi over the past 24 hours.
Memecoin launchpad Pump.Fun has recorded the highest gross revenue in all of decentralized finance (DeFi) in the last 24 hours, surpassing even Ethereum.
The platform has raised $867,429 in the past 24 hours, compared to $844,276 for Ethereum, according to DeFiLlama. Solana-based Telegram trading bot Trojan was the third-highest revenue generator of the day, as memecoin infrastructure continues to dominate in DeFi.
Pump.Fun generates $315 million in annualized revenue according to DeFiLlama, and has averaged $906,160 per day over the past week.
Income Ranking – Source: DeFiLlama
The memecoin frenzy of the past few months is behind Pump.fun’s dominance. Solana-based memecoins have been the main drug of choice for on-chain degenerates.
The app allows non-technical users to launch their own tokens in minutes. Users can spend as little as $2 to launch their token and are not required to provide liquidity up front. Pump.Fun allows new tokens to trade along a bonding curve until they reach a set market cap of around $75,000, after which the bonding curve will then be burned on Raydium to create a safe liquidity pool.
Pump.Fun generates revenue through accrued fees. The platform charges a 1% fee on transactions that take place on the platform. Once a token is bonded and burned on Raydium, Pump.fun is no longer able to charge the 1% fee.
Ethereum is the blockchain of the second-largest cryptocurrency, Ether, with a market cap of $395 billion. It powers hundreds of applications and thousands of digital assets, and backs over $60 billion in value in smart contracts.
Ethereum generates revenue when users pay fees, called gas and denominated in ETH, to execute transactions and smart contracts.
DeFi
DeFi technologies will improve trading desk with zero-knowledge proofs
DeFi Technologies, a Canadian company financial technology companyis set to enhance its trading infrastructure through a new partnership with Zero Computing, according to a July 30 statement shared with CryptoSlate.
The collaboration aims to integrate zero-knowledge proof tools to boost operations on the Solana And Ethereum blockchains by optimizing its ability to identify and execute arbitrage opportunities.
Additionally, it will improve the performance of its DeFi Alpha trading desk by enhancing its use of ZK-enabled maximum extractable value (MEV Strategies).
Zero knowledge Proof of concept (ZKP) technology provides an additional layer of encryption to ensure transaction confidentiality and has recently been widely adopted in cryptographic applications.
Optimization of trading strategies
DeFi Technologies plans to use these tools to refine DeFi Alpha’s ability to spot low-risk arbitrage opportunities. The trading desk has already generated nearly $100 million in revenue this year, and this new partnership is expected to further enhance its algorithmic strategies and market analysis capabilities.
Zero Computing technology will integrate ZKP’s advanced features into DeFi Alpha’s infrastructure. This upgrade will streamline trading processes, improve transaction privacy, and increase operational efficiency.
According to DeFi Technologies, these improvements will increase the security and sophistication of DeFi Alpha’s trading strategies.
The collaboration will also advance commercial approaches for ZK-enabled MEVs, a new concept in Motor vehicles which focuses on maximizing value through transaction fees and arbitrage opportunities within block production.
Additionally, DeFi Technologies plans to leverage Zero Computing technology to develop new financial products, such as zero-knowledge index exchange-traded products (ETPs).
Olivier Roussy Newton, CEO of DeFi Technologies, said:
“By integrating their cutting-edge zero-knowledge technology, we not only improve the efficiency and privacy of our transactions, but we also pave the way for innovative trading strategies.”
Extending Verifiable Computing to Solana
According to the release, Zero Computing has created a versatile, chain-agnostic platform for generating zero-knowledge proofs. The platform currently supports Ethereum and Solana, and the company plans to expand compatibility with other blockchains in the future.
The company added that it is at the forefront of introducing verifiable computation to the Solana blockchain, enabling complex computations to be executed off-chain with on-chain verification. This development represents a significant step in the expansion of ZKPs across various blockchain ecosystems.
Mentioned in this article
Latest Alpha Market Report
DeFi
Elastos’ BeL2 Secures Starknet Grant to Advance Native Bitcoin Lending and DeFi Solutions
Singapore, Asia, July 29, 2024, Chainwire
- Elastos BeL2 to Partner with StarkWare to Integrate Starknet’s ZKPs and Cairo Programming Language with BeL2 for Native DeFi Applications
- Starknet integration allows BeL2 to provide smart contracts and dapps without moving Bitcoin assets off the mainnet
- Starknet Exchange Validates the Strength of BeL2’s Innovation and Leadership in the Native Bitcoin Ecosystem
Elastos BeL2 (Bitcoin Elastos Layer2) has secured a $25,000 grant from Starknet, a technology leader in the field of zero-knowledge proofs (ZKPs). This significant approval highlights the Elastos BeL2 infrastructure and its critical role in advancing Bitcoin-native DeFi, particularly Bitcoin-native lending. By integrating Starknet’s ZKPs and the Cairo programming language, Elastos’ BeL2 will enhance its ability to deliver smart contracts and decentralized applications (dapps) without moving Bitcoin (BTC) assets off the mainnet. This strategic partnership with Starknet demonstrates the growing acceptance and maturity of the BeL2 infrastructure, reinforcing Elastos’ commitment to market leadership in the evolving Bitcoin DeFi market.
Starknet, developed by StarkWare, is known for its advancements in ZKP technology, which improves the privacy and security of blockchain transactions. ZKPs allow one party to prove to another that a statement is true without revealing any information beyond the validity of the statement itself. This technology is fundamental to the evolution of blockchain networks, which will improve BeL2’s ability to integrate complex smart contracts while preserving the integrity and security of Bitcoin.
“We are thrilled to receive this grant from Starknet and announce our partnership to build tighter integrations with its ZKP technology and the Cairo programming language,” said Sasha Mitchell, Head of Bitcoin Layer 2 at Elastos. “This is a major milestone for BeL2 and a true recognition of the maturity and capabilities of our core technology. This support will allow us to further develop our innovation in native Bitcoin lending as we look to capitalize on the growing acceptance of Bitcoin as a viable alternative financial system.”
A closer integration with Cairo will allow BeL2 to leverage this powerful programming language to enhance Bitcoin’s capabilities and deliver secure, efficient, and scalable decentralized finance (DeFi) applications. Specifically, the relationship with Cairo reinforces BeL2’s core technical innovations, including:
- ZKPs ensure secure and private verification of transactions
- Decentralized Arbitrage Using Collateralized Nodes to Supervise and Enforce Fairness in Native Bitcoin DeFi
- BTC Oracle (NYSE:) facilitates cross-chain interactions where information, not assets, is exchanged while Bitcoin remains on the main infrastructure
BeL2’s vision goes beyond technical innovation and aims to innovate by creating a new financial system. The goal is to build a Bitcoin-backed Bretton Woods system, address global debt crises, and strengthen Bitcoin’s role as a global hard currency. This new system will be anchored in the integrity and security of Bitcoin, providing a stable foundation for decentralized financial applications.
As integration with Starknet and the Cairo programming language continues, BeL2 will deliver further advancements in smart contract capabilities, decentralized arbitration, and innovative financial products. At Token 2049, BeL2 will showcase further innovations in its core technologies, including arbitrators, that will underscore Elastos’ vision for a fairer decentralized financial system rooted in Bitcoin.
About Elastos
Elastos is a public blockchain project that integrates blockchain technology with a suite of redesigned platform components to produce a modern Internet infrastructure that provides intrinsic privacy and ownership protection for digital assets. The mission is to create open source services that are accessible to the world, so developers can create an Internet where individuals own and control their data.
The Elastos SmartWeb platform enables organizations to recalibrate how the Internet operates to better control their own data.
https://www.linkedin.com/company/elastosinfo/
ContactPublic Relations ManagerRoger DarashahElastosroger.darashah@elastoselavation.org
DeFi
Compound Agrees to Distribute 30% of Reserves to COMP Shareholders to End Alleged Attack on Its Governance
Compound will introduce the staking program in exchange for Humpy, a notorious whale accused of launching a governance attack on the protocol, negating a recently adopted governance proposal.
Compound is launching a new staking program for COMP holders as a compromise with Humpy, a notorious DeFi whale accused of launching a governance attack against the veteran DeFi protocol.
On July 29, Bryan Colligan, head of business development at Compound, published a governance proposal outlining plans for a new compound participation product that would pay 30% of the project’s current and future reserves to COMP participants.
Colligan noted that the program was requested by Humpy in exchange for his agreement Proposition 289 — which sought to invest 499,000 COMP worth approximately $24 million into a DeFi vault controlled by Humpy, and which appears to have been forced by Humpy and his associates over the weekend.
“We propose the following staking product that meets Humpy’s stated interests as a recent new delegate and holder of COMP in exchange for the repeal of Proposition 289 due to the governance risks it poses to the protocol,” Colligan said. “The Compound Growth Program…will execute the above commitments, given the immediate repeal of Proposition 289.”
Colligan added that the proposal would expire at 11:59 p.m. EST on July 29. Had Humpy not rescinded Proposition 289, Compound would move forward with it. Proposition 290 — block Humpy using the Compound team’s multi-sig to deploy a new governor contract removing the delegate’s governance power behind Proposition 289.
Hunchback tweeted that Proposition 289 had been repealed a few hours ago. “Glad to have brought Compound Finance back into the spotlight,” they said. added. “StakedComp… finally becomes a yield-generating asset!
Markets reacted favorably to the resolution, with the price of COMP increasing by 6.2% over the past 24 hours, according to CoinGecko.
Attack on governance
Proposition 289 proposed investing 499,000 COMP from the Compound treasury into goldCOMP, a yield-generating vault of the Humpy-linked Golden Boys team.
The proposal passed with nearly 52 percent of the vote on July 28, despite two previous iterations of the proposal being defeated by strong opposition. Can And JulyThe proposals notably asked for only 92,000 COMP, with security researchers warning that any deposit of tokens into the goldCOMP vault would cede their governance power.
In May, Michael Lewellen of Web3 security firm OpenZeppelin, note The first proposal was submitted by a new governance delegate who was suddenly awarded 228,000 COMP by five wallets that got their tokens from the Bybit exchange. Combined with his own tokens, the delegate got 325,333 COMP, which is over 81% of the 400,000 tokens required for a governance proposal to reach quorum.
“We have been alerting the community to the risk that these delegates could support a potential attack on governance,” Lewellen said. “The timing of the new proposal and these recent delegations are suspect.”
Read more: Compound community accuses famous whale of attacking engineering governance
-
News8 months ago
Leeds hospitals trust says finances are “critical” amid £110m deficit
-
News6 months ago
Modiv Industrial to release Q2 2024 financial results on August 6
-
News6 months ago
Volta Finance Limited – Director/PDMR Shareholding
-
News8 months ago
Inventiva reports 2024 First Quarter Financial Information¹ and provides a corporate update
-
DeFi8 months ago
🏴☠️ Pump.Fun operated by Insider Exploit
-
News6 months ago
Apple to report third-quarter earnings as Wall Street eyes China sales
-
Videos8 months ago
“We will enter the ‘banana zone’ in 2 WEEKS! Cryptocurrency prices will quadruple!” – Raoul Pal
-
News6 months ago
Number of Americans filing for unemployment benefits hits highest level in a year
-
Tech8 months ago
Bitcoin’s Correlation With Tech Stocks Is At Its Highest Since August 2023: Bloomberg ⋆ ZyCrypto
-
Tech8 months ago
Everything you need to know
-
Markets8 months ago
Whale Investments in Bitcoin Hit $100 Billion in 2024, Fueling Insane Investor Optimism ⋆ ZyCrypto
-
Videos8 months ago
History will be made tomorrow! The Cryptocurrency Market Will Absolutely Crash – Raoul Pal