Compound Finance Site Compromised in Phishing Attack
Summary
Compound Finance's frontend was compromised and now hosts a phishing site. Phishing attacks, which involve fraudulent communications appearing to come from a reputable source, have resulted in over $104 million being stolen from users in the first two months of 2024. The compromised site, compound(.)finance, redirects to "compound-finance.app", a tool that drains funds if interacted with. However, the actual Compound protocol is unaffected and all existing user deposits are safe. Compound, which allows users to deposit, lend and borrow tokens using the Ethereum blockchain, holds over $2.3 billion worth of assets. Despite the attack, Compound's COMP token prices remained stable.
