DeFi Platforms PancakeSwap and Cream Finance Hit With Simultaneous Domain Attacks

Hackers have hit decentralized finance (DeFi) platforms PancakeSwap (CAKE) and Cream Finance (CREAM) in simultaneous attacks that sought to compromise users’ private keys.

In a tweet posted Monday morning, Cream Finance revealed that their website had suffered a domain name system (DNS) spoofing attack which tried to trick their users into typing their private seed phrase into a fake MetaMask input box.

“Our DNS has been compromised by a third party; some users are seeing requests for seed phrase on http://app.cream.finance. DO NOT enter your seed phrase. We will never ask you to submit any private key or seed phrases.”

PancakeSwap also confirmed that its DNS has been compromised. Users are also being required to enter their seed phrase upon trying to connect to MetaMask.

This is now confirmed.

DO NOT go to the Pancakeswap site until we confirm it is all clear.

NEVER EVER input your seed phrase or private keys on a website.

We are working on recovery now.

Sorry for the trouble. https://t.co/JN7TXlo9od

— PancakeSwap 🥞 #BSC (@PancakeSwap) March 15, 2021

While in the midst of the DNS hijack, both projects implored their users to never enter their private keys or seed phrase to any website as a precautionary measure.

A few hours after reports of the attack surfaced, Cream Finance highlighted that they have regained control of their DNS, as well as both their http://cream.finance and https://app.cream.finance websites.

As for PancakeSwap, the project is still working to update its DNS records across the internet.

“Still a couple of areas left. https://dnschecker.org/#NS/pancakeswap.finance“

Don’t Miss a Beat – Subscribe to get crypto email alerts delivered directly to your inbox

Follow us on Twitter, Facebook and Telegram

Surf The Daily Hodl Mix

Featured Image: Shutterstock/Sergey Nivens