Data leak

“DeFi Giant dYdX Says Its v3 Platform Is Compromised – Just as It's Reportedly Up for Sale”

2024-07-23 [vendor] dYdX v3 exchange website compromised
Primary Source ↗

Incident Details

Crypto exchange dYdX has announced that the website for their v3 exchange was compromised, and is urging people not to use it. This announcement came almost simultaneously with a report from Bloomberg that the company behind the exchange was looking to sell the software behind the v3 exchange, after they’d upgraded to what they call v4.The affected domain was hosted on Squarespace, which could connect this compromise to similar events earlier in the month affecting domains registered there.

Technical Details

Initial Attack Vector
DNS hijacking / domain takeover (front-end compromise)
Vendor / Product
dYdX v3 exchange website compromised

Timeline

  1. 2024-07-23 Breach occurred
  2. 2024-07-23 Publicly disclosed