BSC-based PancakeSwap Warns of Hack!

[Whited35 15285]

This topic is to spread awareness to everyone. Recently, DeFi exchange PancakeSwap is attacked by hackers by using DNS hijack method. According to the official Twitter account of PancakeSwap, developers are working to fix and they have also warned users not to enter the wallet seeds. 

 

What is DNS hijack?
In this sort of attack, hackers re-route the traffic to the malicious servers and take control over the front end of some websites. 

 

Smart contracts of the platform are not affected but you will lose your funds if you enter the wallet's seeds into the compromised site. Binance CEO, CZ has also shared a Tweet about the DNS hijacks attack on DeFi projects Pankcake, Cream, etc.

 

 

[Ridam 7455]

Thanks for the update about attack. I also just got awared about it and I was shocked at first but after knowing it is only a DNS attack my thought calm down. I am also providing the liquidity in the Panecake swap so, at the beginning I thought I lost but later realising the attack nature makes me calm down. 

I have checked earlier: It was audited by CERTIK, so are there any bugs becauase of which it happened or other reasons behind it?

It seems the attack is like the phising attack but in the same address of the panecakeswap.  So, giving the seed phrase in any site is totally risky. And as other DEX like Bakeryswap are also vulnerable to this attack in my view? What do you think about them? I have fund in Bakeryswap too, so I am feeling ambivalent about my decision.

[Whited35 15285]

15 hours ago, Ridam said:

I have checked earlier: It was audited by CERTIK, so are there any bugs becauase of which it happened or other reasons behind it?

Yes, some bugs on their smart contracts were also there and I have been doubting it since its launching date. This attack was just to take control over the front end of the platform that means smart contract is still safe. Yes, some loopholes were there and scammers detected them to perform the attacks. 

15 hours ago, Ridam said:

And as other DEX like Bakeryswap are also vulnerable to this attack in my view? What do you think about them? I have fund in Bakeryswap too, so I am feeling ambivalent about my decision.

There are quite differences between phishing and DNS server hijacking attacks. DNS hijacks attack is done to make domain servers unstable or migrating to the malicious servers. I have not heard any unpleasant news about the BakerySwap but you have to careful on it too.  

[Whited35 15285]

On 3/18/2021 at 9:53 PM, Gulmia said:

My dear friends. Reading this from member makes me feel like most of old members care a lot about newbies that they somehow worried about banning of newbies because of lack

Lol, stop to be off-topic ! I am not worried to newbies who are not following the forum rules to get banned here. This is to warn users if they are blindly entering their secret seeds while using Binance Smart Chain(BSC) based PancakeSwap exchange. I see possibilities, if you also keep sharing the random posts with the generic phrases, you will be the next to be punished from forum admin !