GSD-2022-1004953

Import Source
https://github.com/cloudsecurityalliance/gsd-database/blob/main/2022/1004xxx/GSD-2022-1004953.json
Withdrawn
2023-03-14T07:01:09.294850Z
Published
2022-08-09T23:36:36.438030Z
Modified
2023-03-14T07:01:09.294850Z
Details

The curve.finance web site was DNS hijacked on 2022-08-09 and a new smart contract that drains victims wallets if accepted is being served. Previously the DNS was registered through GoDaddy. The attack was partially mitigated through a white hat hacker that executed a SYN flooding attack against the new IP addresses serving the malicious smart contract, limiting the ability for victims to connect and be attacked.

References

Affected packages