In another major security incident in the crypto space, decentralized crypto exchange Curve Finance discovered that its DNS was hacked.

The hackers managed to deploy a malicious contract on the homepage, which, once approved by the victim, would drain users’ wallets completely. According to Binance CEO Changpeng Zhao, the attackers stole more than $570,000 from users’ wallets. CZ further wrote:

They use GoDaddy for DNS, which is insecure. No Web3 project should use this. Very susceptible to social engineering.

Curve Finance became aware of the case and said the curve.fi nameserver had been compromised. He also said that the curve.exchange doesn’t seem to be affected because it uses a different DNS provider.

Curve Finance fixes and rollbacks the issue

In one of the other Twitter posts, Curve.finance noted that they had found the issue and canceled it. He asked users to immediately revoke any contract. Curve Finance noted:

The problem has been found and resolved. If you have approved contracts on Curve in the past few hours, please revoke them immediately. Please use http://exchange.curve for now until the spread for http://curve.fi returns to normal.

Curve Finance is one of the most prominent decentralized finance (DeFi) projects on the market. According to DeFi website tracker Llama, the protocol has over $6 billion in deposits. This is down from $24 billion in deposits year-to-date. Security exploits have increased over the past quarter and the crypto market crash.

Curve Finance has been considered an integral part of the DeFi ecosystem due to the token reward issuance of CRV tokens. This also serves as a source of revenue for several other protocols in the DeFi ecosystem.

In the past 24 hours, the Curve DAO Token (CRV) has fallen over 10% and is currently trading at $1.27 with a market cap of $660 million.