Azoundria: Created page with "{{Imported Case Study With About|source=https://www.quadrigainitiative.com/casestudy/unstoppabledomainssquarespacednshijacking.php}} {{Unattributed Sources}} Unstoppable Domains Logo/HomepageUnstoppable Domains offers web3-based domain names which serve as an identity for users on the blockchain. On July 11th, Google Domains were acquired by SquareSpace, which set up a transition process whereby users could log in to transfer their..."

2024-09-18T21:58:13Z

Created page with "{{Imported Case Study With About|source=https://www.quadrigainitiative.com/casestudy/unstoppabledomainssquarespacednshijacking.php}} {{Unattributed Sources}} thumb|Unstoppable Domains Logo/HomepageUnstoppable Domains offers web3-based domain names which serve as an identity for users on the blockchain. On July 11th, Google Domains were acquired by SquareSpace, which set up a transition process whereby users could log in to transfer their..."

New page

{{Imported Case Study With About|source=https://www.quadrigainitiative.com/casestudy/unstoppabledomainssquarespacednshijacking.php}}
{{Unattributed Sources}}

[[File:Unstoppabledomains.jpg|thumb|Unstoppable Domains Logo/Homepage]]Unstoppable Domains offers web3-based domain names which serve as an identity for users on the blockchain. On July 11th, Google Domains were acquired by SquareSpace, which set up a transition process whereby users could log in to transfer their accounts to SquareSpace. There was no validation on who owned those accounts, which allowed malicious individuals to claim and hijack popular domain names. These domain names were redirected to phishing sites. This included the Unstoppable Domains domain name.<ref name="slowmisthackedarchive-14712" /><ref name="unstoppablewebtwitter-14713" /><ref name="securityalliance-14714" /><ref name="unstoppabledomains-14715" /><ref name="unstoppabledomains-14716" /><ref name="samczsuntwitter-14717" /><ref name="theporpoisemedium-14718" /><ref name="beingandotwitter-14719" /><ref name="sandycartertwitter-14720" />

== About Unstoppable Domains ==
"One Stop Shop for Onchain Domains Own your identity in the digital world." "Unstoppable Domains is on a mission to create user-owned, digital identity for every person on the planet. To accomplish this, we are creating web3 domains that put you back in control of your data. These aren’t just traditional domains, these are domains with superpowers."

"Your Unstoppable domain is your identity for Web3. Use your Unstoppable Domain to build and verify your digital identity, log in seamlessly to applications, games and metaverses, make payments easier by simplifying lengthy crypto wallet addresses, and create and host websites that you fully own.

Unstoppable Domains are minted on the blockchain with zero gas fees. Best of all, once you buy and claim a Web3 domain, it's yours forever — no renewal fees."

"Find your ideal domain from a vast selection of endings that fit both your brand's personality and budget." "Seamlessly secure your domain with credit card or crypto-payments." "Instantly mint your new domain to your personal wallet or choose the UD Vault for enchanced security." "Enjoy complete control over your domain — manage or sell it whenever you choose."

== The Reality ==
This sections is included if a case involved deception or information that was unknown at the time. Examples include:

* When the service was actually started (if different than the "official story").
* Who actually ran a service and their own personal history.
* How the service was structured behind the scenes. (For example, there was no "trading bot".)
* Details of what audits reported and how vulnerabilities were missed during auditing.

== What Happened ==
"Last week, our DNS provider @squarespace, experienced a compromise during the migration from Google Domains, affecting many companies. This issue was isolated to DNS settings on Squarespace and did not impact Unstoppable Domains’ core services."
{| class="wikitable"
|+Key Event Timeline - Unstoppable Domains SquareSpace DNS Hijacking
!Date
!Event
!Description
|-
|July 16th, 2024 2:32:00 PM MDT
|Explanation Tweet Posted
|Unstoppable Domains posts a tweet with an explanation of what happened to compromise the domain name.
|-
|July 16th, 2024 2:37:00 PM MDT
|Back Secure And Operational
|Unstoppable Domains makes a Twitter post to announce that their website and communications are now fully secure. They promise security enhancements in the future, including transferring the domain to themselves as a registrar and tokenizing the domain name.
|}

== Technical Details ==
"Unfortunately, many domain contributors never created their Squarespace accounts either because they forgot that they were granted contributor access, or they didn’t expect inaction to have security implications, making it quite easy for a threat actor to beat them to the punch and gain full access to their account."

== Total Amount Lost ==
No funds were lost.

How much was lost and how was it calculated? If there are conflicting reports, which are accurate and where does the discrepancy lie?

== Immediate Reactions ==
"Importantly, our backend services, smart contracts and critical infrastructure were unaffected, ensuring your data remains completely safe.

No user data leaks or account compromises occurred, reaffirming our commitment to your security."

"Web3 domain provider Unstoppable Domains stated on Twitter that Unstoppabledomains.com was attacked. Until further notice, please do not open any emails from @unstoppabledomains.com or use the website."

"We actively engaged in a Telegram community with other companies impacted, offering support and sharing insights to help everyone involved.

Our team worked tirelessly to review the situation. Because our backend was completely secure, no data was compromised and your information remains safe."

== Ultimate Outcome ==
"We’re pleased to report that our website, http://unstoppabledomains.com, and communications from @unstoppabledomains.com are secure & fully operational.

--> Our team worked tirelessly to prioritize and ensure the safety and security of our users.

--> No user data leaks or account compromises occurred.

--> Soon we will be moving our .com to Unstoppable as a Registrar and tokenizing it to provide an extra level of security and reliability."

"Traditional DNS registrars like @squarespace can face security challenges if compromised. Once we finalize ICANN approval for our registrar license, we’ll transfer and tokenize http://unstoppabledomains.com within our own system. This transition is expected within the next month."

"Once tokenized and onchain, any changes to DNS records or domain transfers will require a wallet signature.

This will enhance security, functionality and protect against attacks."

"No action is required from users at this time. As a best practice we recommend everyone turn on two-factor authentication (2FA).

To further secure your online presence, consider getting your .com domains through Unstoppable in the future.

Tokenizing your domains with us provides extra security and reliability, helping you avoid similar issues and ensuring better protection."

== Total Amount Recovered ==
There do not appear to have been any funds recovered in this case.

What funds were recovered? What funds were reimbursed for those affected users?

== Ongoing Developments ==
What parts of this case are still remaining to be concluded?
== Individual Prevention Policies ==
{{Prevention:Individuals:Placeholder}}

{{Prevention:Individuals:End}}

== Platform Prevention Policies ==
{{Prevention:Platforms:Placeholder}}

{{Prevention:Platforms:End}}

== Regulatory Prevention Policies ==
{{Prevention:Regulators:Placeholder}}

{{Prevention:Regulators:End}}

== References ==
<references><ref name="slowmisthackedarchive-14712">[https://web.archive.org/web/20240716205758/https://hacked.slowmist.io/ SlowMist Hacked - SlowMist Zone] (Accessed Jul 16, 2024)</ref>

<ref name="unstoppablewebtwitter-14713">[https://twitter.com/unstoppableweb/status/1811734634012536888 @unstoppableweb Twitter] (Accessed Jul 16, 2024)</ref>

<ref name="securityalliance-14714">[https://securityalliance.notion.site/A-Squarespace-Retrospective-or-How-to-Coordinate-an-Industry-Wide-Incident-Response-fead693b66c14543a48283d85aec19ad#d6dadefb0ac8458aad1a8311494f3f67 Notion – The all-in-one workspace for your notes, tasks, wikis, and databases.] (Accessed Jul 16, 2024)</ref>

<ref name="unstoppabledomains-14715">[https://unstoppabledomains.com/ Unstoppable Domains — web3 domains for everyone] (Accessed Jul 16, 2024)</ref>

<ref name="unstoppabledomains-14716">[https://unstoppabledomains.com/about About | Unstoppable Domains] (Accessed Jul 16, 2024)</ref>

<ref name="samczsuntwitter-14717">[https://twitter.com/samczsun/status/1812895261972217897 @samczsun Twitter] (Accessed Jul 16, 2024)</ref>

<ref name="theporpoisemedium-14718">[https://medium.com/@theporpoise/our-domain-was-hijacked-heres-how-blockchain-can-prevent-this-from-happening-to-you-9b9696d80d07 Our SquareSpace Domain Was Hijacked! Here’s How Blockchain Can Prevent This From Happening To You | by Matthew Gould | Jul, 2024 | Medium] (Accessed Jul 16, 2024)</ref>

<ref name="beingandotwitter-14719">[https://twitter.com/beingando/status/1812045868834377878 @beingando Twitter] (Accessed Jul 16, 2024)</ref>

<ref name="sandycartertwitter-14720">[https://twitter.com/sandy_carter/status/1813311920025596204 @sandy_carter Twitter] (Accessed Jul 16, 2024)</ref></references>

Unstoppable Domains SquareSpace DNS Hijacking - Revision history