
Key Takeaways:
- Ethena Labs suffered a front-end attack on September 18, 2024, after its domain registrar was compromised.
- Despite the breach, no customer funds were affected, and the protocol itself remains secure.
- MetaMask and Blockaid warned users of phishing risks and advised caution, including disconnecting wallets.
Ethena Labs experienced a front-end attack on September 18, 2024, after its domain registrar account was compromised.
As a result, Ethena deactivated its site and advised users to avoid interacting with the platform or any impersonating sites until the issue is resolved.
The Ethena domain registrar account was recently compromised and we have taken steps to deactivate the site until further notice.
— Ethena Labs (@ethena_labs) September 18, 2024
The protocol is unaffected and funds are safe.
Please do not interact with any site or application purporting to be the Ethena frontend.
Despite the breach, the Ethena protocol remains secure, and no customer funds were affected.
Security firm Blockaid also warned users to disconnect their wallets immediately if they were connected during the attack.
🚨 URGENT: We have detected a potential frontend attack targeting @ethena_labs.
— Blockaid (@blockaid_) September 18, 2024
If you're connected, please refrain from signing transactions and disconnect your wallet immediately. We’re working closely with affected partners. More updates soon. pic.twitter.com/Ub8tra0X46
MetaMask flagged the Ethena website as deceptive due to phishing risks, advising users to be cautious of fraudsters.