Notable decentralized cryptocurrency exchange Curve Finance was compromised earlier this week, as threat actors were able to effectively “clone” curve.fi and send user traffic to its fake crypto-exchange site.
“This marks yet another instance where web3 projects are compromised through vulnerabilities in the web2 infrastructures they rely on,” said CertiK co-founder and CEO Ronghui Gu.
“While there will always be some relationship between web2 and web3 systems, building the necessary security control points in web2, as well as resolving the vulnerabilities that hamper this relationship, is a vital step in securing the web3 ecosystem.”
At least $770,000 was stolen from Curve Finance users, who were directed to a false copy of the Curve site and then told to sign off on a contract (which can from the bad actors) that then was able to lift funds from the Curve Finance users’ online wallets.
For its part, Curve Finance issued a statement to users over messaging platform Telegram, where it alerted them to the potential security threats they could face. Curve Finance also encouraged users to “revoke” any contract agreements in which they may have engaged, and simply use the curve.exchange domain until the propagation for curve.fi righted itself.
“As their name suggests, cross-chain bridges are an attempt to facilitate the exchange of crypto assets between differing chains,” Gu said. To achieve this, they must combine multiple structures such as custodian, debt issuer and an “oracle.”
“This makes cross-chain bridges somewhat vulnerable as there are multiple attack avenues for would-be hackers to exploit,” Gu said. “Cross-chain bridges have clearly addressed a real need in the web3 community, and consequently, they hold a huge amount of value. These structural vulnerabilities, in conjunction with the amount of assets available, make them an extremely enticing target for hackers.”
Adrien Gendre, chief technology and product officer at Vade, said that very much like online bank accounts, “crypto exchanges are irresistible targets because it is a quick win for hackers — they can simply transfer funds or unload the crypto in an instant.”
“Other types of attacks require more work and more time to achieve the final goal,” Gendre added. “We are seeing more and more of this, and this can be very difficult to detect.”
Cryptocurrency exchanges thrown another ‘Curve’ with recent DNS attack & Latest News Update
Cryptocurrency exchanges thrown another ‘Curve’ with recent DNS attack & More Live News
All this news that I have made and shared for you people, you will like it very much and in it we keep bringing topics for you people like every time so that you keep getting news information like trending topics and you It is our goal to be able to get
all kinds of news without going through us so that we can reach you the latest and best news for free so that you can move ahead further by getting the information of that news together with you. Later on, we will continue
to give information about more today world news update types of latest news through posts on our website so that you always keep moving forward in that news and whatever kind of information will be there, it will definitely be conveyed to you people.
Cryptocurrency exchanges thrown another ‘Curve’ with recent DNS attack & More News Today
All this news that I have brought up to you or will be the most different and best news that you people are not going to get anywhere, along with the information Trending News, Breaking News, Health News, Science News, Sports News, Entertainment News, Technology News, Business News, World News of this made available to all of you so that you are always connected with the news, stay ahead in the matter and keep getting today news all types of news for free till today so that you can get the news by getting it. Always take two steps forward
Credit Goes To News Website – This Original Content Owner News Website . This Is Not My Content So If You Want To Read Original Content You Can Follow Below Links