Vitalik Buterin Warns Users After eth.limo DNS Hijack
Ethereum co-founder Vitalik Buterin warned customers on April 18 to cease visiting any eth.limo URLs after the favored ENS gateway suffered a DNS registrar assault.
The eth.limo staff confirmed the compromise minutes later, stating its area had been hijacked and that it was working with all concerned events to repair the issue.
What Happened to eth.limo
Eth.limo is a free, open-source gateway that lets customers entry Ethereum Name Service (ENS) content material via commonplace net browsers. It interprets ENS names into HTTPS URLs, permitting anybody to go to decentralized web sites with out working an IPFS node.
The attacker gained management of eth.limo’s account at its area registrar. This gave them the power to redirect all site visitors on the wildcard *.eth.limo area, doubtlessly exposing guests to phishing pages or malware.
Buterin shared a direct IPFS hyperlink to his private weblog as a secure different and requested customers to attend for an all-clear from the eth.limo staff earlier than resuming regular entry.
“The type folks at @eth_limo have warned me that there was an assault on their DNS registrar. So please don’t go to vitalik.eth.limo or different eth.limo pages till they verify that issues are again to regular,” wrote Buterin.
Decentralization’s Centralized Weak Spot
The incident highlights a recurring vulnerability in Web3 infrastructure. While ENS information and IPFS content material stay decentralized and weren’t compromised, the DNS layer that connects them to conventional browsers nonetheless is determined by centralized registrars.
Similar assaults have beforehand focused DeFi protocols like Cream Finance and Aerodrome, each via registrar-level compromises.
Crypto phishing losses exceeded $4 billion in 2025, with frontend hijacks changing into an more and more widespread assault vector.
No consumer fund losses have been confirmed to this point. The eth.limo staff has not but issued an all-clear, and customers ought to proceed avoiding all *.eth.limo URLs till additional discover.
The put up Vitalik Buterin Warns Users After eth.limo DNS Hijack appeared first on BeInCrypto.