Ether.fi 迅速采取行动避免域名劫持

Ether.fi 是一种流动性重新抵押协议，最近在 9 月 24 日夺取其域名的努力中取得了胜利。

Ether.fi, a liquid restaking protocol, recently fended off an attempt to seize its domain on September 24. The attackers tried to capture the platform’s domain through the registrant Gandi net.

Ether.fi 是一种流动性重新抵押协议，最近于 9 月 24 日阻止了对其域名的夺取。攻击者试图通过注册人 Gandi 网络夺取该平台的域名。

Ether.fi responded swiftly, and its security arrangements remained intact to ensure no user funds or services were impacted.

Ether.fi 反应迅速，其安全安排保持完好，以确保用户资金或服务不会受到影响。

The event unfolded when Ether.fi received an email for domain recovery from Gandi.net. This triggered an immediate security response with SPF, DKIM, and DMARC tests performed on the email. Upon identifying the potential risk, Ether.fi froze its domain account instantly to prevent further manipulation.

当 Ether.fi 收到来自 Gandi.net 的域名恢复电子邮件时，事件发生了。这触发了对电子邮件执行 SPF、DKIM 和 DMARC 测试的立即安全响应。在发现潜在风险后，Ether.fi 立即冻结了其域名帐户，以防止进一步的操纵。

Once Ether.fi confirmed the domain’s involvement in the attack, it contacted Gandi.net through multiple channels to secure the domain.

当 Ether.fi 确认该域名参与攻击后，它通过多种渠道联系 Gandi.net 以确保该域名的安全。

By 7:30 PM UTC, Gandi had successfully locked the domain, preventing any changes. The attack attempt failed, and Ether.fi later clarified that the attack did not penetrate any internal systems and users’ funds were safe.

到 UTC 时间晚上 7:30，Gandi 已成功锁定域，防止任何更改。此次攻击尝试失败，Ether.fi 随后澄清称，此次攻击并未渗透任何内部系统，用户资金是安全的。

Ether.fi Averts Domain Hijack with Swift Action

Ether.fi 迅速采取行动避免域名劫持

According to Ether.fi, it was able to respond to and avert the attack due to specific security measures, including hardware authentication. These measures helped to protect critical sites during the domain hijacking attempt and were crucial for their defense.

据 Ether.fi 称，由于采用了包括硬件身份验证在内的特定安全措施，它能够响应并避免攻击。这些措施有助于在域名劫持企图期间保护关键站点，并且对于其防御至关重要。

Another key factor in maintaining control over the firm’s infrastructure was its use of strong domain registrar security measures.

保持对公司基础设施的控制的另一个关键因素是其使用强大的域名注册商安全措施。

Gandi.net’s senior domain administrators detected and handled the threat through internal monitoring tools, which bolstered Ether.fi’s domain protection.

Gandi.net 的高级域管理员通过内部监控工具检测并处理了威胁，从而增强了 Ether.fi 的域保护。

Ether.fi has urged users not to visit the website until all functionality is fully checked and verified. The company has also come out to assure its users that user data or funds were not compromised and that operations have resumed safely.

Ether.fi 敦促用户在所有功能均经过全面检查和验证之前不要访问该网站。该公司还向用户保证，用户数据或资金没有受到损害，并且运营已安全恢复。

While Ether.fi investigates, the company is working with Gandi.net to gather more details on the attack. Both parties aim to complete a report in the next 48 hours. Ether.fi’s case serves as a cautionary tale, as the DeFi ecosystem continues to grapple with weak domain security.

在 Ether.fi 进行调查的同时，该公司正在与 Gandi.net 合作收集有关攻击的更多详细信息。双方计划在未来 48 小时内完成报告。 Ether.fi 的案例是一个警示，因为 DeFi 生态系统仍在继续应对域名安全薄弱的问题。

DeFi Firms Face Rising Cybersecurity Challenges

DeFi 公司面临日益严峻的网络安全挑战

Ether.fi’s recent domain takeover is the latest in a string of security incidents at DeFi platforms. These attacks have highlighted several points of weakness across the sector, prompting firms to bolster their protection regimes.

Ether.fi 最近的域名接管是 DeFi 平台发生的一系列安全事件中的最新一起。这些攻击凸显了整个行业的几个弱点，促使企业加强其保护制度。

Despite the lack of success in most cases, these attacks threaten the integrity of user data and funds.

尽管在大多数情况下都没有成功，但这些攻击威胁到了用户数据和资金的完整性。

For example, Ethena Labs faced a similar incident earlier this month when its domain registrar account was hacked.

例如，Ethena Labs 本月早些时候就遇到了类似的事件，其域名注册商帐户遭到黑客攻击。

However, it’s worth noting that while the Ethena site went down briefly, the users’ funds and the protocol itself remained safe. Ethena Labs warned users to be wary of any site claiming to be affiliated with the company.

然而，值得注意的是，虽然 Ethena 网站短暂瘫痪，但用户的资金和协议本身仍然安全。 Ethena Labs 警告用户警惕任何声称与该公司有关联的网站。

On September 19, another suspect cyberattack targeted a cryptocurrency trading bot, Banana Gun. The attackers exploited a code vulnerability in the bot and siphoned off nearly $2 million in crypto coins. Such incidents underscore the need for improved security measures to be implemented and adopted by the DeFi industry.

9 月 19 日，另一起可疑网络攻击针对的是加密货币交易机器人 Banana Gun。攻击者利用机器人中的代码漏洞窃取了近 200 万美元的加密货币。此类事件凸显 DeFi 行业需要实施和采用改进的安全措施。