QUADRIGA INITIATIVE
CRYPTO WATCHDOG & FRAUD RECOVERY PLATFORM
A COMMUNITY-BASED, NOT-FOR-PROFIT
$0 USD
SEPTEMBER 2024
GLOBAL
ETHER FINANCE
DESCRIPTION OF EVENTS

"Stake ETH, get eETH - the liquid restaking token that rewards you more across DeFi."
"ether.fi is a decentralized, non-custodial delegated staking protocol with a Liquid Staking token. One of the distinguishing characteristics of ether.fi is that stakers control their keys. The ether.fi mechanism also allows for the creation of a node services marketplace where stakers and node operators can enroll nodes to provide infrastructure services."
"In weeks prior, there was an increase in exploitation of [domain registrar] attack vectors observed with other protocols. We preemptively upgraded our key platforms to require hardware authentication as an authentication method"
"Gandi’s monitoring systems and process, while aggressive, locked down the domain account and prevented any access to our systems, and kept our websites, apps and emails safe from the attempted attack"
"Gandi was contacted on multiple platforms. At approximately 19:30 UTC it was confirmed that ether.fi’s account had been successfully locked to prevent further tampering and the nameserver config restored. There is a comprehensive analysis of external and internal systems in progress, and as of now there are no traces of an internal breach observed."
"More details of the incident will be shared as they become available in collaboration with Gandi's team over the next two days. Thank you to the Seal911 team, Doppel, Ethena and Distrust our security partner - teams that instantly responded and provided assistance as we navigated the dangerous waters today.
We’re glad to report that all funds are safe, and no opportunity was given to the attackers to present a compromised dapp on any ether.fi related domain."
ether.fi is a liquid restacking token which allows Ethereum to be staked and also used for other services in the ecosystem. ether.fi reports an attempt was made to take over their domain name, however this was successfully prevented through the use of hardware-based devices and previous contact with the domain registrar. The attack was not successful and the ether.fi domain name remained within the team's control.
Sep 24: Incident - attempted domain account takeover | ether.fi (Oct 25)
Etherfi (Oct 25)
Etherfi (Oct 25)
Getting Started | ether.fi (Oct 25)
Introduction | ether.fi (Oct 25)
