Expanding Impact: Domain Hijacking Incident Affects 15 Domains

The scale of a recent domain hijacking incident has grown. According to updated information provided by Name.com to media outlets, the number of customer domains compromised in the attack has increased from an initial count of 12 to 15. The domain registrar confirmed that control over all hijacked domains has now been successfully restored.

Platform Connections Draw Scrutiny

Significantly, development platform Vercel later disclosed that 10 of these compromised domains were linked to its services. This detail expands the scope of responsibility beyond the domain registration layer, raising questions about security coordination between registrars and hosting platforms.

Attack Methodology and Scope

The attack unfolded late Friday. Hackers infiltrated several DeFi project websites—including Flap, Kintsu, Pickle Finance, and Origami Finance—deploying malicious scripts that drained visitors' cryptocurrency wallets. Registration records indicate all hijacked domains were registered through Name.com, with 10 suspended at the registrar level by Saturday morning.

Tracking the Financial Loss

To date, approximately $138,000 in stolen funds has been tracked to three wallet addresses on EVM-compatible chains. It's important to note this figure does not include potential losses on other blockchain networks like Solana or Aptos, suggesting the total impact could be higher.

Security Gaps Reveal Industry Coordination Weaknesses

This incident highlights an often-overlooked vulnerability in the Web3 space: insufficient security information synchronization between domain registrars and website hosting platforms. When domains are illegally transferred or hijacked, related platforms often struggle to detect and respond in a timely manner.

  • Registrar Response Time: Name.com took action to suspend some hijacked domains after the incident, but not before substantial losses occurred.
  • Platform Monitoring Capability: The real-time monitoring capabilities of hosting platforms like Vercel for domain status changes are now under scrutiny.
  • User Protection Mechanisms: DeFi projects appear to lack multi-layered verification for domain security, relying heavily on single registrars.

This event serves as another reminder for Web3 project teams that domain security should not be treated as a secondary concern. While smart contract audits and wallet security receive significant attention, domain management—serving as the primary entry point for projects—also requires robust security protocols and contingency plans.