Do Not Visit’: DeFi Protocols Compound and Celer Hit With Wallet Drainer Attacks

The websites of Ethereum-based DeFi protocol Compound and multi-chain interoperability protocol Celer Network have been compromised following a DNS attack, causing their front-ends to redirect users to malicious pages that drain connected wallets.

Compound, a decentralized finance (DeFi) protocol that enables users to borrow and lend crypto by locking their assets, was first reported to be under attack by pseudonymous on-chain investigator ZachXBT via his Telegram channel, where he warned of a possible hijack. Shortly after, Web3 security tool Harpie confirmed that the site was redirecting users to a wallet-drainer page.

Compound has since confirmed the breach, advising users not to visit the website or click on any links until further notice.

Source: https://decrypt.co/239412/do-not-visit-defi-protocols-compound-celer-wallet-drainer-attacks