Squarespace Security Breach on July 10, 2024, Leads to Domain Hijacking of Multiple Web3 and DeFi Sites

Jul 11, 2024, 11:22 PM

A significant security breach has impacted numerous domains hosted by Squarespace, following its acquisition of Google Domains. The breach, which began on July 10, 2024, has compromised several popular Web3 and DeFi sites, including Hyperliquid, dYdX, Pendle, and Unstoppable Domains. Many of these sites were transferred to Squarespace after Google sold its domain business in June 2023. The breach has led to domain hijacking attempts, prompting warnings from various entities to avoid using affected services and to enable two-factor authentication (2FA) immediately. Vertex Protocol and Steer Protocol have confirmed that they are investigating the situation, while Karak Network and Term Labs have reported that their domains remain secure. Gnosis Multisig is also at risk but currently safe. The incident underscores the importance of robust domain security measures, with experts advising the migration of high-value domains to more secure platforms like Cloudflare or AWS. Additionally, there are concerns about wallet drainers being used in the attacks.