Compound Security Breach Has Now Been Fixed

Compound Labs has resolved a security breach that occurred on its compound.finance website due to a phishing attack, which exposed user data and assets to potential risks. The company restored security to the site and advised users to verify URLs to avoid fraudulent sites. The incident highlights the ongoing security challenges faced by the decentralized finance (DeFi) industry, possibly due to vulnerabilities in domain registrars. It is crucial for users to double-check URLs such as “compound.finance,” “app.compound.finance,” or “compoundlabs.xyz” to ensure they are accessing the legitimate website. Security experts and the Compound Finance team have warned against interacting with the compromised site to prevent potential losses. This incident, along with similar attacks affecting other blockchain projects, emphasizes the broader concerns regarding web infrastructure vulnerabilities. It is suspected that the security breach at Compound and other attacks may be linked to vulnerabilities at Squarespace, the registrar handling the domains of these projects.