Ether.fi 迅速採取行動避免網域劫持

Ether.fi 是一種流動性重新抵押協議，最近在 9 月 24 日奪取其網域的努力中取得了勝利。

Ether.fi, a liquid restaking protocol, recently fended off an attempt to seize its domain on September 24. The attackers tried to capture the platform’s domain through the registrant Gandi net.

Ether.fi 是一種流動性重新抵押協議，最近於 9 月 24 日阻止了對其域名的奪取。

Ether.fi responded swiftly, and its security arrangements remained intact to ensure no user funds or services were impacted.

Ether.fi 反應迅速，其安全安排保持完好，以確保用戶資金或服務不會受到影響。

The event unfolded when Ether.fi received an email for domain recovery from Gandi.net. This triggered an immediate security response with SPF, DKIM, and DMARC tests performed on the email. Upon identifying the potential risk, Ether.fi froze its domain account instantly to prevent further manipulation.

當 Ether.fi 收到來自 Gandi.net 的網域恢復電子郵件時，事件就發生了。這觸發了對電子郵件執行 SPF、DKIM 和 DMARC 測試的立即安全回應。在發現潛在風險後，Ether.fi 立即凍結了其網域帳戶，以防止進一步的操縱。

Once Ether.fi confirmed the domain’s involvement in the attack, it contacted Gandi.net through multiple channels to secure the domain.

當 Ether.fi 確認網域參與攻擊後，它會透過多種管道聯繫 Gandi.net 以確保網域的安全。

By 7:30 PM UTC, Gandi had successfully locked the domain, preventing any changes. The attack attempt failed, and Ether.fi later clarified that the attack did not penetrate any internal systems and users’ funds were safe.

到 UTC 時間晚上 7:30，Gandi 已成功鎖定網域，防止任何變更。這次攻擊嘗試失敗，Ether.fi 隨後澄清稱，這次攻擊並未滲透任何內部系統，用戶資金是安全的。

Ether.fi Averts Domain Hijack with Swift Action

Ether.fi 迅速採取行動避免網域劫持

According to Ether.fi, it was able to respond to and avert the attack due to specific security measures, including hardware authentication. These measures helped to protect critical sites during the domain hijacking attempt and were crucial for their defense.

據 Ether.fi 稱，由於採用了包括硬體身份驗證在內的特定安全措施，它能夠回應並避免攻擊。這些措施有助於在網域劫持企圖期間保護關鍵站點，並且對於其防禦至關重要。

Another key factor in maintaining control over the firm’s infrastructure was its use of strong domain registrar security measures.

維持對公司基礎設施的控制的另一個關鍵因素是其使用強大的網域註冊商安全措施。

Gandi.net’s senior domain administrators detected and handled the threat through internal monitoring tools, which bolstered Ether.fi’s domain protection.

Gandi.net 的高級網域管理員透過內部監控工具偵測並處理了威脅，從而增強了 Ether.fi 的網域保護。

Ether.fi has urged users not to visit the website until all functionality is fully checked and verified. The company has also come out to assure its users that user data or funds were not compromised and that operations have resumed safely.

Ether.fi 敦促用戶在所有功能均經過全面檢查和驗證之前不要訪問該網站。該公司還向用戶保證，用戶資料或資金沒有受到損害，並且營運已安全恢復。

While Ether.fi investigates, the company is working with Gandi.net to gather more details on the attack. Both parties aim to complete a report in the next 48 hours. Ether.fi’s case serves as a cautionary tale, as the DeFi ecosystem continues to grapple with weak domain security.

在 Ether.fi 進行調查的同時，該公司正在與 Gandi.net 合作收集有關攻擊的更多詳細資訊。雙方計劃在未來 48 小時內完成報告。 Ether.fi 的案例是一個警示，因為 DeFi 生態系統仍在繼續應對域名安全薄弱的問題。

DeFi Firms Face Rising Cybersecurity Challenges

DeFi 公司面臨日益嚴峻的網路安全挑戰

Ether.fi’s recent domain takeover is the latest in a string of security incidents at DeFi platforms. These attacks have highlighted several points of weakness across the sector, prompting firms to bolster their protection regimes.

Ether.fi 最近的網域接管是 DeFi 平台發生的一系列安全事件中的最新一起。這些攻擊凸顯了整個產業的幾個弱點，促使企業加強其保護制度。

Despite the lack of success in most cases, these attacks threaten the integrity of user data and funds.

儘管在大多數情況下都沒有成功，但這些攻擊威脅到了用戶資料和資金的完整性。

For example, Ethena Labs faced a similar incident earlier this month when its domain registrar account was hacked.

例如，Ethena Labs 本月稍早就遇到了類似的事件，其網域註冊商帳戶遭到駭客入侵。

However, it’s worth noting that while the Ethena site went down briefly, the users’ funds and the protocol itself remained safe. Ethena Labs warned users to be wary of any site claiming to be affiliated with the company.

然而，值得注意的是，雖然 Ethena 網站短暫癱瘓，但用戶的資金和協議本身仍然安全。 Ethena Labs 警告用戶警惕任何聲稱與該公司有關的網站。

On September 19, another suspect cyberattack targeted a cryptocurrency trading bot, Banana Gun. The attackers exploited a code vulnerability in the bot and siphoned off nearly $2 million in crypto coins. Such incidents underscore the need for improved security measures to be implemented and adopted by the DeFi industry.

9 月 19 日，另一起可疑網路攻擊針對的是加密貨幣交易機器人 Banana Gun。攻擊者利用機器人中的程式碼漏洞竊取了近 200 萬美元的加密貨幣。此類事件凸顯 DeFi 產業需要實施和採用改進的安全措施。