曲线金融警告用户DNS劫持针对其官方领域的用户

Defi协议曲线金融发布了最新的X帖子发出了关键的安全警告，强调了Curve.fi的黑客攻击 - 其官方领域。

DeFi protocol Curve Finance has issued a key security warning with the latest X post, impacting the crypto community.

Defi协议曲线财务已发布了最新的X帖子的关键安全警告，从而影响了加密货币社区。

Announcing the hacking of curve.fi – its official domain – the platform has urged users to avoid interacting with the website, which is currently redirecting to a clone site that could drain user assets with a single click.

该平台宣布Curve.fi的黑客攻击（其官方域）敦促用户避免与网站进行交互，该网站目前正在重定向到一个可以单击一键汇入用户资产的克隆网站。

The team stated:

团队说：

“While all smart contracts are safe, the domain name (curve.fi) is pointing to a malicious site which can drain your wallet. We are investigating and working on recovering access.”

“虽然所有智能合约都是安全的，但域名（curve.fi）都指向一个恶意网站，该网站可能会耗尽您的钱包。我们正在调查并致力于恢复访问权限。”

The team is working to regain access to the website, which is currently redirecting to a clone site that could drain user assets with a single click. A single click could see users transfer their entire fortune to the scammers.

该团队正在努力重新获得对该网站的访问，该网站目前正在重定向到一个可以单击的克隆网站，该网站可以单击一键。单击可以看到用户将全部财富转移到骗子上。

These incidents have contributed to the massive losses incurred by crypto investors every year.

这些事件每年导致加密投资者造成的巨大损失。

That explains the sudden sentiment shift among CRV investors.

这解释了CRV投资者之间的突然情绪转移。

The altcoin confirms the prevailing uncertainty in its price actions.

Altcoin确认其价格行动中普遍的不确定性。

CRV has returned to regions it explored before the latest trade deal between China and the US.

CRV已返回到中国与美国之间最新的贸易协议之前探索的地区。

The native token trades at $0.7181 after losing more than 7% of its value in the past 24 hours.

本地令牌在过去24小时内损失了其价值的7％以上后，以0.7181美元的价格交易。

Bitcoin's retreat from $105K to $102K at press time also contributed to CRV's weakness, but the latest hacking incident exacerbated the alt's downside.

发稿时，比特币从$ 105K到$ 102K的撤退也导致了CRV的弱点，但最新的黑客事件加剧了ALT的不利因素。

What are DNS attacks?

什么是DNS攻击？

With innocent investors and traders suffering massive losses due to scammers, DNS (Domain Name System) hijacks aren’t new in the digital assets industry.

由于骗子造成的无辜投资者和贸易商遭受了巨大的损失，DNS（域名系统）在数字资产行业中并不是什么新鲜事。

The scams work by redirecting users from legitimate sites to a malicious version, which prompts users to transfer assets to scammers’ wallets.

这些骗局通过将用户从合法站点重定向到恶意版本来起作用，这促使用户将资产转移到骗子的钱包中。

The attackers manipulate DNS servers to redirect traffic to imposter sites that facilitate the fraud.

攻击者操纵DNS服务器以重定向流量，以促进欺诈行为。

Therefore, a single click could cause innocent investors and traders to lose considerable losses.

因此，单击可能会导致无辜的投资者和交易者失去巨大的损失。

User trust dented

用户信任凹陷

The team confirmed that smart contracts, which are at the heart of Curve’s infrastructure, remained secure.

该团队确认，这是Curve基础设施核心的智能合约仍然安全。

That means the platform’s decentralized backend is functioning normally.

这意味着平台的分散后端正常运行。

Nevertheless, front-end trust remains paramount. Daily users utilize the site interface to access DeFi protocols.

然而，前端信任仍然至关重要。每日用户利用站点界面访问DEFI协议。

That poses a risk, as even a short-lived DNS attack could see enthusiasts lose assets by unknowingly performing malicious transactions.

这构成了风险，因为即使是短暂的DNS攻击也可能使爱好者通过在不知不觉中进行恶意交易而失去资产。

That explains the sudden frustrations within the Curve community, especially as the team hasn't issued a timeline to solve the issue.

这解释了曲线社区中突然的挫败感，尤其是当团队没有发布时间表来解决问题时。

One user commented:

一位用户评论：

“Really important reminder for folks navigating DeFi these days. Secure contracts don’t matter much when the domain itself becomes the weak link.”

“如今，对于赛道的人们来说，非常重要的提醒。当域本身成为薄弱环节时，安全合同并不重要。”

Solution?

解决方案？

While the Curve team battles to regain the website, users remain unsatisfied. Most question how the protocol will prevent such occurrences in the future.

曲线团队为重新获得网站而战斗时，用户仍然不满意。大多数人质疑该协议将来如何防止此类事件。

But Curve Finance confirmed plans to ditch DNS for ENS (Ethereum Name Service).

但是曲线融资确认了抛弃ENS（以太坊名称服务）的计划。

While the two facilitate human-readable name usage on online resources, they differ in control and technology.

尽管这两个促进了在线资源上的人类可读名称，但它们在控制和技术方面有所不同。

DNS boasts a centralized system managed by hosting providers and registrars, whereas ENS is an Ethereum-based naming service that leverages smart contracts to name ETH addresses.

DNS拥有由托管提供商和注册服务商管理的集中系统，而ENS是基于以太坊的命名服务，该服务利用智能合约命名ETH地址。

CRV price takes a hit

CRV价格受到打击

Curve’s native token reacted to the spreading fear with a downtrend.

Curve的土著令牌对散布的恐惧反应。

It hovers at $0.7181 after an over 7% decline on its 24-hour chart.

在其24小时图表下降了7％以上，它徘徊在0.7181美元。

The surging trading volume likely highlights increased activity from investors looking to exit to avoid further losses amid the hacking uncertainty.

不断增长的交易量可能突显了希望退出的投资者增加活动，以避免在黑客不确定性中进一步损失。

With the broader crypto market correcting after the latest rally, CRV could faces more downside before regaining ground.

随着更广泛的加密货币市场在最新的集会之后进行纠正，CRV可能会在恢复地面之前面临更大的方面。