Was Convex Finance targeted in the latest spoofing exploit

ambcrypto.com:

Amid the broader market downturn, 24 June was a rather unforgettable day for the crypto community. After the Harmony Bridge was attacked for $100 million Convex Finance urged its users to be diligent in checking the addresses for contract approvals. Reportedly, the website of Convex Finance was hijacked earlier on 24 June.

Curve’s Convex Finance is a DeFi protocol built to reward liquidity providers. It also provides additional yields to those who stake Curve Finance’s native token, CRV. The protocol suffered a DNS (Domain Name System) hijacking.

It was targeted in the latest spoofing exploit. The hijacking prompted users to accept and approve malicious contracts for some interactions on the site. In fact, the attack was confirmed by the Convex team via the following tweet,

— Convex Finance (@ConvexFinance) June 23, 2022

The Convex team confirmed the five addresses that approved these “malicious contracts.” They asked the owners of the following addresses to report via Twitter or Discord channels at the earliest. The accounts listed in the tweet were,

While the investigation is still going on, no funds are affected yet on the verified contracts. In the wake of this alarming issue, the Convex team then created an alternate domain as a precautionary measure for users. Until the post-mortem of the attack, the sites mentioned below are being suggested for safe passage into the protocol.

The attack on Convex Finance comes on a day when $100 million in ETH