Another DeFi Hack: PancakeSwap, Cream Finance Websites Compromised

DeFi Hack Security

Author

Linas Kmieliauskas

Author

Linas Kmieliauskas

Author Profile

Share

Copied

Last updated:

June 26, 2023 06:56 EDT

Why Trust Cryptonews

Cryptonews has covered the cryptocurrency industry topics since 2017, aiming to provide informative insights to our readers. Our journalists and analysts have extensive experience in market analysis and blockchain technologies. We strive to maintain high editorial standards, focusing on factual accuracy and balanced reporting across all areas - from cryptocurrencies and blockchain projects to industry events, products, and technological developments. Our ongoing presence in the industry reflects our commitment to delivering relevant information in the evolving world of digital assets. Read more about Cryptonews

At least two major decentralized finance (DeFi) projects – Pancakeswap (CAKE) and Cream Finance (CREAM) – on Monday, urged their users to stay away from their websites that were hit with so-called DNS-hijacks. (Updated at 16:32 UTC: updates throughout the entire text. Updated on March 16, 05:21 UTC with a comment from Cream Finance.)

At 16:03 UTC, PancakeSwap said that they regained access to the DNS.

“Some users might still be affected, depending on their DNS resolution as some propagation time may be needed,” they said, promising more updates soon.

Meanwhile, Cream Finance, at 16:16 UTC, said they have purchased and deployed to app.creamfinance.co, claiming that this site is safe to use. Later, they confirmed that they have also regained control of DNS and “everything is back to normal on cream.finance and app.cream.finance” – “these sites are now safe to use.”

“Your funds are only at risk if you enter your private key or seed phrase into the hijacked site,” PancakeSwap said on Monday.

Cream Finance also confirmed that their “DNS has been compromised by a third party; some users are seeing requests for seed phrase on https://app.cream.finance. DO NOT enter your seed phrase.”

“A number of DeFi projects are under DNS hijack attack. Pancake, Cream, etc. Please be VERY VERY careful and not use them until they recover the situation,” Binance CEO Changpeng Zhao warned.

___
Learn more:
– Hack Sunday: NFT Theft Follows a Personal Token Attack
– Crypto Security in 2021: More Threats Against DeFi and Individual Users