According to ChainCatcher, DeFi yield market Pendle released a vulnerability analysis of the domain name hijacking incident, saying that the website building platform Squarespace purchased all domain name registrations and customer accounts from Google Domains in June 2023, resulting in domain name migration. Recently, attackers exploited a vulnerability in Squarespace and hijacked domain names hosted on its platform, including Pendle's domain name. According to ICANN's policy, these domain names will no longer be able to be transferred from Squarespace to other registrars after about 20 days.
40 minutes after the domain hijacking occurred, the Pendle development team successfully regained full control of the domain and took all necessary measures to ensure normal operations were restored. The Pendle protocol and smart contracts were not affected and funds were safe.
