All 15 hijacked dApp domains recovered, but attacker keeps 13 DNS zones and TLS certs valid to 2027

banteg · x · 2026-11-01

Coinspect's update on the dApp frontend hijacking incident: all 15 affected domains have been recovered, but the attacker still controls 13 DNS zones at Name.com pointing to 31.56.52.52, holds TLS certificates valid until January 29, 2027, and keeps one server online. A timeline table shows zone writes and cert issuance across domains like flap.sh, fluxbeam.xyz, and pickle.finance.

Original post →

More from Safety

Safety channel →