Breaking: Binance Smart Chain Listed Cream and Pancake Defi Protocols Falls Prey to DNS Hijack

Pancake Swap, Cream Finance, and few other Defi protocols listed on Binance Smart Chain (BSC) have reportedly experienced a DNS breach from a third-party. Binance CEO Changpeng Zhao has asked traders to stay away from these breached Defi protocols until the risk is mitigated.

A number of DeFi projects are under DNS hijack attack. Pancake, Cream, etc. Please be VERY VERY careful and not use them until they recover the situation. Please also help spread the awareness. https://t.co/rG8Ad77nYF

— CZ 🔶 Binance (@cz_binance) March 15, 2021

Cream Finance was the first to report the DNS breach where hackers posted seed phrase requests following which the official Twitter handle of the Defi protocol requested users to avoid using their platform and to never reveal their seed phrase.

Our DNS has been compromised by a third party; some users are seeing requests for seed phrase on https://t.co/Hr6S4Fqodo. DO NOT enter your seed phrase.

We will never ask you to submit any private key or seed phrases.

— Cream Finance ???? (@CreamdotFinance) March 15, 2021

Just a couple of hours later Pancake Swap another popular BSC listed defi protocol reported a similar DNS breach. The defi protocol also asked users to avoid using the platform for the time being.

This is now confirmed.

DO NOT go to the Pancakeswap site until we confirm it is all clear.

NEVER EVER input your seed phrase or private keys on a website.

We are working on recovery now.

Sorry for the trouble. https://t.co/JN7TXlo9od

— PancakeSwap ???? #BSC (@PancakeSwap) March 15, 2021

BSC Becomes the Target of Exploiters Amid Growing Popularity

Binance Smart Chain has gained a lot of traction in the past couple of months from Ethereum traders and the Defi ecosystem owing to the growing gas fee and network congestion on the Ethereum network. BSC was processing 2X daily volume than the Ethereum network on average during this phase showing the extent of surge in its usage.

People started projecting BSC as the Next Ethereum killer at least until the scalability issues are resolved, however, with the surge in popularity the BSC also became a primary target of scammers and hijackers in recent times. The first major breach took place only a couple of weeks ago where a newly listed defi project called Meerkat Finance allegedly rug-pulled $32 million worth of tokens just a day after listing.

Binance also faced a lot of scrutiny for OM protocol listing because of the alleged fraudulent past of the founders. Many ETH proponents have dismissed BSC’s recent claim to fame warning about similar attacks owing to the centralized nature of the BSC blockchain.

Pancake Swap Regains Access to DNS

Pancake Swap has reportedly gained back access to its DNS post-breach but warned that some users might still be under-affected. The defi protocol also assured that they are still working to completely fixed the problem and will post another update soon.

We have regained access to the DNS.

Some users might still be affected, depending on their DNS resolution as some propagation time may be needed.

Will send another update shortly.

Thanks for waiting.

— PancakeSwap ???? #BSC (@PancakeSwap) March 15, 2021