According to Odaily Planet Daily, SlowMist Yuxian posted a message on X saying that the attacker took over the corresponding account of ether.fi through the recovery process of Gandi.net, the domain name registrar of ether.fi.

Fortunately, it was discovered in time and no damage was caused. Yu Xian believes that it is likely to be the work of a phishing gang.