Hackers changed DNS records of PancakeSwap and Cream Finance projects for phishing

The PancakeSwap decentralized exchange and the DeFi Cream Finance project running on the Binance Smart Chain blockchain have been phishing attacks on DNS servers.

Hackers gained access to the domain name system (DNS) of these projects to redirect traffic to phishing sites. The PancakeSwap team confirmed the hack on Twitter. The exchange’s technical support urged users not to go to the Pancakeswap website, and also not to enter the seed phrase and private keys on the site until the site is restored. PancakeSwap smart contracts were not attacked, hackers only gained control over DNS records. It took the platform specialists about an hour to restore access to DNS. They warned that some users may still experience difficulties entering the exchange due to the DNS caching of telecom operators.

The Cream Finance executives also said that the service’s website had been hacked. Therefore, users are advised to refrain from using it, so as not to enter confidential data on a malicious site. Users’ funds must remain safe if they themselves do not pass on sensitive information to attackers. Binance CEO Changpeng Zhao reported that many decentralized finance (DeFi) projects have begun to come under attack on the DNS, so Zhao urged users to be as careful as possible.

DeFi projects are of particular interest to hackers. So, last fall, the Akropolis project suffered from a hacker attack, during which the attackers were able to withdraw $ 2 million in DAI stablecoins. The Harvest Finance decentralized finance protocol did not bypass the attention of hackers – the hackers managed to withdraw cryptoassets in the amount of $ 25 million.

Telegram channel!

You may also like