12 DeFi sites hijacked, all on Name.com; $138K stolen
A dozen DeFi front ends were taken over, and every one of the domains is registered through Name.com, pointing to a registrar-level compromise.
Advertising disclosure: we may earn a commission when you join an operator via links on this page, at no cost to you. This never dictates our ratings. How we make money
Key takeaways
- Hackers hijacked 12 DeFi websites and stole roughly $138,000.
- Registry records seen by The Block show all 12 domains sit with Name.com.
- The shared registrar suggests a compromise at that level, not 12 separate breaches.
- Smart contracts weren't the target here; the websites users click through were.
Someone just hijacked a dozen DeFi websites and walked off with about $138,000. What ties them together? All 12 domains are registered through Name.com, according to registry records The Block reviewed.
What we know
Not much beyond that, honestly. Twelve sites, one registrar, roughly $138,000 gone. The shared registrar is why investigators and observers suspect a compromise at that level, and it's a fair suspicion. Twelve unrelated projects getting hit the same way at once? Big coincidence.
What we don't know: how the attackers got in, which projects were affected, or whether Name.com has confirmed a breach. None of that is in the reporting available to us. So treat the registrar theory as a strong lead, not a verdict.
How a domain hijack works
Control the domain and you control where it points. Users type the right address, connect their wallet, and land on a look-alike front end. Approve one bad transaction and your funds can head to the attacker. The protocol's code could be flawless and it wouldn't matter one bit.
Why it matters
If you use DeFi, the website is part of your attack surface. Audited contracts won't save you from a poisoned front end. Read what your wallet asks you to sign, especially unexpected approvals, and don't assume a familiar URL is safe right now. Bookmarks only help if the domain itself hasn't been hijacked.
For projects, the lesson is blunt: lock down registrar accounts with hardware-key two-factor and registry locks. And there's a bigger question hanging over all this. Is one registrar quietly holding too many DeFi front doors?
Source: The Block
Top Crypto Casinos Right Now
🇦🇺 Showing sites that accept players from Australia Change country
Advertising disclosure: we may earn a commission when you join an operator via links on this page, at no cost to you. This never dictates our ratings. How we make money
More info Less info
Why we chose it: A US-oriented casino that turns away only New Jersey. The cashier takes crypto, but the site publishes fewer specifics than any operator we list.
- KYC
- Required
Restricted countries: New Jersey (US).
More info Less info
Why we chose it: One of the widest crypto line-ups of any book we list - seven coins with fast payouts - aimed squarely at Asia and Latin America rather than the US or Western Europe.
- Licence
- Curacao
Restricted countries: Austria, Belgium, Bulgaria, Cyprus, Czechia, Germany, Denmark, Estonia and 21 more.
More info Less info
Why we chose it: Built for American bettors, priced accordingly. Biggest welcome bonus of the five, attached to the heaviest rollover of the five.
- Online since
- 1994
- Licence
- Curaçao
- Payout time
- 24–48 hours (crypto)
- Wagering
- 18x sportsbook / 30x casino
- KYC
- Required
Restricted countries: Belgium, Costa Rica, Croatia, Curaçao, Aruba, Sint Maarten, Caribbean Netherlands, France and 11 more.
Priya Nair
Priya covers the AI side of crypto — agent tokens, decentralised compute and where the two industries actually meet.
