According to ChainCatcher, DEX dYdX announced that the domain name registrar of dydx.exchange (formerly Squarespace) confirmed that dYdX Trading's Squarespace account was accessed by unauthorized personnel on July 23 because these people successfully carried out a social engineering attack on Squarespace customer support.
In the approximately 2 hours that the dydx.exchange domain name was hijacked, 2 users lost a total of approximately US$31,000.
dYdX Trading has reached out to these users and will ensure they are fully compensated. After re-securing the domain, dYdX has added additional controls to prevent this from happening again, including migrating the domain to Cloudflare.