Balancer blames ‘social engineering attack’ on DNS provider for website hijack

Blockchain security firms SlowMist and CertiK also believe the crypto wallet drainer Angel Drainer was involved in the estimated $238,000 exploit.

Balancer Blames ‘social Engineering Attack’ On Dns Provider For Website Hijack_65b96d1f9a8d0.jpeg

The team behind Balancer, an Ethereum-based automated market maker, believes a social engineering attack on its DNS service provider was what led to its website’s frontend being compromised on Sept. 19, leading to an estimated $238,000 in crypto stolen.

“After investigation, it is clear that this was a social engineering attack on EuroDNS, the domain registrar used for .fi TLDs,” the firm explained in a Sept. 20 X post.

Approximately 8 hours after the first warning of the attack, Balancer said its decentralized autonomous organization (DAO) was actively addressing the DNS attack and was working to recover the Balancer UI.

At 5:45 pm UTC on Sept. 20, Balancer said it was successful in securing the domain and bringing it back under the control of Balancer DAO. It also confirmed its subdomains “” and other “” are safe to use again.

balancer blames social engineering attack on dns provider for website hijack 65b96d1f9d194

However, it suggested any other projects using the same top-level domain should consider moving to a more secure registrar.

EuroDNS is a Luxembourg-based domain name registrar and DNS service provider. Cointelegraph has reached out to EuroDNS for comment.

Angel Drainer involved

Blockchain security firms SlowMist and CertiK reported that the attacker employed Angel Drainer phishing contracts.

SlowMist said the exploiters attacked the Balancer’s website via Border Gateway Protocol hijacking — a process where hackers take control of IP addresses by corrupting internet routing tables.

The hackers then induced users to “approve” and transfer funds via the “transferFrom” function to the Balancer exploiter, it explained.

Related: Binance CEO refutes report on $250M loan to BAM Management

The hacker, whom SlowMist believes may be related to Russia, has already bridged some of the stolen Ether (ETH) to Bitcoin (BTC) addresses via THORChain before eventually being bridging the ETH back to Ethereum, blockchain security firm SlowMist explained on Sept. 20.

SlowMist stated in an earlier post that the hacker transferred about 15 wrapped-Ether (wETH.e) on the Avalanche blockchain.

balancer blames social engineering attack on dns provider for website hijack 65b96d20339ec

Meanwhile, despite Balancer confirming its subdomains, to now be safe, visits to the website still shows “Deceptive site ahead” warning when attempting to access the Balancer’s website.

Balancer’s website as of Sept. 20 at 10:22 pm UTC. Source: Balancer.

AZC News reached out to Balancer to confirm the amount of funds lost but did not receive an immediate response.


(100 votes)

Leave a Reply

Your email address will not be published. Required fields are marked *


Azcoiner Exclusive Event On Bingx

Airdrops | Altcoin | Editor Choice

AZcoiner Exclusive Event on BingX

Join the exclusive event hosted by AZCoiner in collaboration with the BingX exchange to receive attractive rewards of up to $2000. Participate now to avoid missing out!

Azcnews Breaking

Editor Choice | Research

What is Pump and Dump? What Should You Do When This Phenomenon Occurs?

The phenomenon of Pump & Dump is quite prevalent in the cryptocurrency market. So, what is Pump? What is Dump? And what should you do when this phenomenon occurs? Let's find out through the article below!

Azcnews1 Breaking

Editor Choice | Research

What is Runes Protocol? The Protocol Generating Heat Ahead of the Halving

After Halving, the narrative will only revolve around Bitcoin and Runes is a story just like that. So, what is Runes protocol? Let's find out right away!

Azcnews Breaking

Editor Choice | Research

What is Staking Crypto? Tips to Maximize Profit When Holding Coins

When you hold any coin without knowing how to optimize its profitability, coins with staking mechanisms help you generate additional profits while you hold them. So, what is Staking? What are the benefits of staking? Let's find out!


News | Bitcoin | Editor Choice

Bitcoin Rises to $65,000 Just Hours Before Halving

Bitcoin surged to $65,000, experiencing a nearly 8% fluctuation in just a few hours, amidst signs of easing tensions in Iran.