Convex Finance, a decentralized staking platform, set up new internet addresses (URLs) after an attack involving the prior address led users to a fraudulent website. The developers stated in a tweet that we had fixed the issue and an investigation is still on. Popular protocol Convex enables customers to profit from the stablecoin swap service Curve Finance. The Domain Name Service (DNS) converts user-typed website names into the standard numeric address coding used on the internet. By intercepting that procedure, it is possible to reroute people to other websites with potentially malicious purposes. Investigation is still ongoing, but a quick update for the community:– DNS for https://t.co/5rSUjMgY4u was hijacked, prompting users to approve malicious contracts for some interactions on the site.– Funds on verified contracts are unaffected. — Convex Finance (@ConvexFinance) June 23, 2022 Five Vulnerable Wallets Alexintosh.eth raised a potential exploit concern last night on Twitter, alleging that approvals for contracts were impersonating wallet addresses and tricking users into approving the wrong wallet operations. Convex then prompted users to “review approvals” as developers looked into a “possible front end issue” shortly after. Convex identified five wallets as being vulnerable to the susceptibility. According to developers, funds on confirmed contracts on Convex were unaffected. Token approvals or rights users give to de...
