eth.limo domain hijack: EasyDNS don confirm say na social engineering; DNSSEC dey limit di damage
EasyDNS don admit say dem get security failure wey allow social engineering attacker carry away di eth.limo domain. Di attacker con pretend say e be member of di eth.limo team to sidestep EasyDNS account recovery, den e change eth.limo DNS settings make traffic pass through Cloudflare.
For dia post-mortem, eth.limo talk say dem inform di community wen di hijack konoticed and say dem no sabi any confirmed user impact or loss of funds. EasyDNS CEO Mark Jeftovic add say dis na di first successful social engineering incident for di company 28-year history.
One major saving tin na DNSSEC. EasyDNS talk say DNSSEC-aware resolvers reject di forged DNS responses cos di attacker no get di required cryptographic signing keys, so users dem more likely go see error than dem go redirect go phishing sites. To reduce recurrence risk, EasyDNS dey migrate eth.limo go Domainsure and dem go remove di manual account-recovery pathway wey dem exploit.
Di report still point to related incident: CoW Swap lose control of dia domain for few hours after social engineering attack on di .fi registry, wit estimated impact of $1.2M. For ENS traders, dis show say dem need monitor ENS-related access and reputational risk, even if DNSSEC limit di blast radius.
Neutral
Di domain eth.limo hijack na waa wahala for security an infrastructure, e no be direct change for protocol or token fundamentals for ETH. DNSSEC dem talk sey e limit damage to mostly resolver errors, reduce di chance say plenty users go redirect or money go move. EasyDNS plan to migrate go Domainsure suppose reduce di risk of am happening again, wey good for infrastructure credibility.
Short term, plenty eye on ENS-related URLs and possible reputation wahala fit cause small volatility for liquidity or traffic around ETH ecosystem services, but no confirmed user loss or direct impact to ETH price drivers. Long term, di incident show sey DNS security controls matter; market impact on ETH self likely small unless more confirmed large-scale incidents show—like di CoW Swap domain event wey dem mention.