Celer: The attack only targets third-party DNS providers, and the protocol and smart contracts are not affected

Original source: Celer Network

About 3:45 am to 6:00 am on August 18, 2022, Beijing time, the front-end interface of cBridge Suffering from a DNS cache poisoning attack. The attack resulted in some users being redirected to a malicious smart contract, potentially draining all approved assets. First, please check and revoke any asset approvals for the following contracts:

Ethereum: 0x2A2aA50450811Ae589847D670cB913dF763318E8

BSC: 0x5895da888Cbf3656D8f51E5Df9FD26E8E1 31e7CF

Fantom: 0x458f4d7ef4fb1a0e56b36bf7a403df830cfdf972

Polygon: 0x9c8b72f0d43ba23b96b878f1c1f75edc2beec9f9

Avalanche: 0x9c8B72f0D43 BA23B96B878F1c1F75EdC2Beec9F9

Arbitrum: 0x9c8B72f0D43BA23B96B878F1c1F75EdC2Beec9F9

Astar: 0x9c8B72f0D43BA23B96B878F1c1F75EdC2Beec9F 9

Aurora: 0x9c8b72f0d43ba23b96b878f1c1f75edc2beec9f9

Optimism: 0x9c8b72f0d43ba23b96b878f1c1f75edc2beec9f9

Metis: 0x9c8B72f0D43BA23 B96B878F1c1F75EdC2Beec9F9

The Celer protocol and smart contracts are not affected. The Celer DNS root record was not compromised and has never been modified. Similar to what happened recently with Curve Finance, this attack targeted a third-party DNS provider/ISP outside of the project's own control domain.

Reminder: Regardless of the security of the protocol itself, DNS poisoning may occur on the front end of any DeFi application. Turn on the Secure DNS option in your browser to reduce the chances of being affected: https://support.google.com/chrome/answer/10468685

However, Due to the low adoption rate of DNSSEC, Celer also recommends that you verify the contract address of any DeFi frontend when interacting with it. For cBridge-related contracts, please click: https://cbridge-docs.celer.network/reference/contract-addresses

In this event, the Celer team quickly reacted, luckily only a small percentage of users were affected. Celer will fully compensate users affected by this incident, but users are requested to withdraw their approval of the above contract first.

The cBridge front end will be restored shortly with enhanced monitoring. Likewise, when using cBridge and any other DeFi application, check and revoke any potential approvals and cross-check contract addresses.

Original link

Welcome to join the official BlockBeats community:

Telegram Subscription Group: https://t.me/theblockbeats

Telegram Discussion Group: https://t.me/BlockBeats_App

Official Twitter Account: https://twitter.com/BlockBeatsAsia