Ethereum co-founder Vitalik Buterin warned customers on April 18 to cease visiting any eth.limo URLs after the favored ENS gateway suffered a DNS registrar assault.
The eth.limo crew confirmed the compromise minutes later, stating its area had been hijacked and that it was working with all concerned events to repair the issue.
What Occurred to eth.limo
Eth.limo is a free, open-source gateway that lets customers entry Ethereum Title Service (ENS) content material by means of customary net browsers. It interprets ENS names into HTTPS URLs, permitting anybody to go to decentralized web sites with out working an IPFS node.
The attacker gained management of eth.limo’s account at its area registrar. This gave them the power to redirect all visitors on the wildcard *.eth.limo area, probably exposing guests to phishing pages or malware.
Buterin shared a direct IPFS hyperlink to his private weblog as a protected various and requested customers to attend for an all-clear from the eth.limo crew earlier than resuming regular entry.
“The sort individuals at @eth_limo have warned me that there was an assault on their DNS registrar. So please don’t go to vitalik.eth.limo or different eth.limo pages till they verify that issues are again to regular,” wrote Buterin.
Decentralization’s Centralized Weak Spot
The incident highlights a recurring vulnerability in Web3 infrastructure. Whereas ENS information and IPFS content material stay decentralized and weren’t compromised, the DNS layer that connects them to conventional browsers nonetheless depends upon centralized registrars.
Related assaults have beforehand focused DeFi protocols like Cream Finance and Aerodrome, each by means of registrar-level compromises.
Crypto phishing losses exceeded $4 billion in 2025, with frontend hijacks turning into an more and more frequent assault vector.
No person fund losses have been confirmed thus far. The eth.limo crew has not but issued an all-clear, and customers ought to proceed avoiding all *.eth.limo URLs till additional discover.
The submit Vitalik Buterin Warns Customers After eth.limo DNS Hijack appeared first on BeInCrypto.