Curve ‘strongly suggests’ domain migration to Ethereum name service after $570,000 front-end hack

Curve Finance has more answers to this week’s questions $570,000 frontal attack.

A recent report conducted with domain registrar company iwantmyname, the decentralized exchange’s domain host, said Tuesday’s hack was the result of “DNS cache poisoning, not server compromise.” nouns”.

On August 9, Curve informed users that it suffered a frontal attack where the nameserver, curve.fi, was compromised resulting in $570,000 in Ethereum (ETH) stolen from users.

He reported that the platform had been targeted by a compromise in the hosted domain name service infrastructure. The hackers cloned the server records to mimic the original server, which is known as DNS cache poisoning.

This attack redirects users to a page chosen by the attacker, tricking people into thinking this is the original domain and using the site as usual.

Beyond describing the attack method, Curve also has said that “What happened strongly suggests starting to move to ENS instead of DNS”, referring to the cryptographic equivalent of DNS – a source of names that translates the IP address in the page for users – called the Ethereum name service.

Switching to ENS, as suggested by Curve, would apparently prevent such front-end hacks from happening in the future.

Curve Finance has not yet responded to Decrypt‘s investigations into the matter.

What is the Ethereum Name Service?

Etheruem Name Service, or ENS, has been made popular lately with its ability to transform the long string of letters and numbers that are cryptographic addresses into human-readable addresses.

Instead of that clunky crypto address, one could instead use something like “satoshi.eth” using ENS. And as you can imagine, this “.eth” suffix looks like the native “.com” of the DNS.

But because the service exists on the Ethereum blockchain, it’s much more secure and potentially resistant to attacks like those suffered by Curve on Tuesday.

Stay up to date with crypto news, get daily updates in your inbox.