曲線金融警告用戶DNS劫持針對其官方領域的用戶

Defi協議曲線金融發布了最新的X帖子發出了關鍵的安全警告，強調了Curve.fi的黑客攻擊 - 其官方領域。

DeFi protocol Curve Finance has issued a key security warning with the latest X post, impacting the crypto community.

Defi協議曲線財務已發布了最新的X帖子的關鍵安全警告，從而影響了加密貨幣社區。

Announcing the hacking of curve.fi – its official domain – the platform has urged users to avoid interacting with the website, which is currently redirecting to a clone site that could drain user assets with a single click.

該平台宣布Curve.fi的黑客攻擊（其官方域）敦促用戶避免與網站進行交互，該網站目前正在重定向到一個可以單擊一鍵匯入用戶資產的克隆網站。

The team stated:

團隊說：

“While all smart contracts are safe, the domain name (curve.fi) is pointing to a malicious site which can drain your wallet. We are investigating and working on recovering access.”

“雖然所有智能合約都是安全的，但域名（curve.fi）都指向一個惡意網站，該網站可能會耗盡您的錢包。我們正在調查並致力於恢復訪問權限。”

The team is working to regain access to the website, which is currently redirecting to a clone site that could drain user assets with a single click. A single click could see users transfer their entire fortune to the scammers.

該團隊正在努力重新獲得對該網站的訪問，該網站目前正在重定向到一個可以單擊的克隆網站，該網站可以單擊一鍵。單擊可以看到用戶將全部財富轉移到騙子上。

These incidents have contributed to the massive losses incurred by crypto investors every year.

這些事件每年導致加密投資者造成的巨大損失。

That explains the sudden sentiment shift among CRV investors.

這解釋了CRV投資者之間的突然情緒轉移。

The altcoin confirms the prevailing uncertainty in its price actions.

Altcoin確認其價格行動中普遍的不確定性。

CRV has returned to regions it explored before the latest trade deal between China and the US.

CRV已返回到中國與美國之間最新的貿易協議之前探索的地區。

The native token trades at $0.7181 after losing more than 7% of its value in the past 24 hours.

本地令牌在過去24小時內損失了其價值的7％以上後，以0.7181美元的價格交易。

Bitcoin's retreat from $105K to $102K at press time also contributed to CRV's weakness, but the latest hacking incident exacerbated the alt's downside.

發稿時，比特幣從$ 105K到$ 102K的撤退也導致了CRV的弱點，但最新的黑客事件加劇了ALT的不利因素。

What are DNS attacks?

什麼是DNS攻擊？

With innocent investors and traders suffering massive losses due to scammers, DNS (Domain Name System) hijacks aren’t new in the digital assets industry.

由於騙子造成的無辜投資者和貿易商遭受了巨大的損失，DNS（域名系統）在數字資產行業中並不是什麼新鮮事。

The scams work by redirecting users from legitimate sites to a malicious version, which prompts users to transfer assets to scammers’ wallets.

這些騙局通過將用戶從合法站點重定向到惡意版本來起作用，這促使用戶將資產轉移到騙子的錢包中。

The attackers manipulate DNS servers to redirect traffic to imposter sites that facilitate the fraud.

攻擊者操縱DNS服務器以重定向流量，以促進欺詐行為。

Therefore, a single click could cause innocent investors and traders to lose considerable losses.

因此，單擊可能會導致無辜的投資者和交易者失去巨大的損失。

User trust dented

用戶信任凹陷

The team confirmed that smart contracts, which are at the heart of Curve’s infrastructure, remained secure.

該團隊確認，這是Curve基礎設施核心的智能合約仍然安全。

That means the platform’s decentralized backend is functioning normally.

這意味著平台的分散後端正常運行。

Nevertheless, front-end trust remains paramount. Daily users utilize the site interface to access DeFi protocols.

然而，前端信任仍然至關重要。每日用戶利用站點界面訪問DEFI協議。

That poses a risk, as even a short-lived DNS attack could see enthusiasts lose assets by unknowingly performing malicious transactions.

這構成了風險，因為即使是短暫的DNS攻擊也可能使愛好者通過在不知不覺中進行惡意交易而失去資產。

That explains the sudden frustrations within the Curve community, especially as the team hasn't issued a timeline to solve the issue.

這解釋了曲線社區中突然的挫敗感，尤其是當團隊沒有發佈時間表來解決問題時。

One user commented:

一位用戶評論：

“Really important reminder for folks navigating DeFi these days. Secure contracts don’t matter much when the domain itself becomes the weak link.”

“如今，對於賽道的人們來說，非常重要的提醒。當域本身成為薄弱環節時，安全合同並不重要。”

Solution?

解決方案？

While the Curve team battles to regain the website, users remain unsatisfied. Most question how the protocol will prevent such occurrences in the future.

曲線團隊為重新獲得網站而戰鬥時，用戶仍然不滿意。大多數人質疑該協議將來如何防止此類事件。

But Curve Finance confirmed plans to ditch DNS for ENS (Ethereum Name Service).

但是曲線融資確認了拋棄ENS（以太坊名稱服務）的計劃。

While the two facilitate human-readable name usage on online resources, they differ in control and technology.

儘管這兩個促進了在線資源上的人類可讀名稱，但它們在控制和技術方面有所不同。

DNS boasts a centralized system managed by hosting providers and registrars, whereas ENS is an Ethereum-based naming service that leverages smart contracts to name ETH addresses.

DNS擁有由託管提供商和註冊服務商管理的集中系統，而ENS是基於以太坊的命名服務，該服務利用智能合約命名ETH地址。

CRV price takes a hit

CRV價格受到打擊

Curve’s native token reacted to the spreading fear with a downtrend.

Curve的土著令牌對散佈的恐懼反應。

It hovers at $0.7181 after an over 7% decline on its 24-hour chart.

在其24小時圖表下降了7％以上，它徘徊在0.7181美元。

The surging trading volume likely highlights increased activity from investors looking to exit to avoid further losses amid the hacking uncertainty.

不斷增長的交易量可能突顯了希望退出的投資者增加活動，以避免在黑客不確定性中進一步損失。

With the broader crypto market correcting after the latest rally, CRV could faces more downside before regaining ground.

隨著更廣泛的加密貨幣市場在最新的集會之後進行糾正，CRV可能會在恢復地面之前面臨更大的方面。