Eth.limo has regained control of its domain after a breach at easyDNS, while Vercel reported unauthorized access to customer credentials.
Eth.limo, a gateway for the Ethereum Name Service (ENS), has successfully regained control of its domain following a security breach at easyDNS. The incident involved a hacker impersonating a team member to initiate an account recovery process, thereby gaining unauthorized access to the domain settings.
The attacker altered the name server records, potentially redirecting users to phishing sites. Ethereum co-founder Vitalik Buterin warned users to avoid the site until the issue was resolved. Fortunately, the damage was limited due to the implementation of DNSSEC, which prevented the hacker's false responses from reaching most servers.
EasyDNS CEO Mark Jeftovich acknowledged the breach, describing it as unprecedented in the company's 28-year history. Eth.limo reported no user damage and is transitioning to the Domainsure platform, which eliminates account recovery through customer support to prevent future incidents.
Vercel Reports Security Breach
In a separate incident, cloud provider Vercel disclosed a security breach that allowed hackers to access customer credentials. The breach reportedly began with the compromise of an AI tool used by an employee, which led to unauthorized access to Vercel's internal systems.
CEO Guillermo Rauch confirmed that a listing appeared on the hacker forum BreachForums, where data from Vercel was being offered for $2 million. Customers have been advised to change their credentials and monitor their accounts, although the infrastructure for open projects like Next.js remains unaffected.
These incidents come in the wake of recent high-profile attacks, including a $280 million theft from the Drift Protocol on Solana and a $293 million loss from the Kelp restaking protocol due to a cross-chain bridge exploit.
