According to EasyDNS, attackers used social engineering to gain access to the eth.limo registrar account, briefly redirecting DNS settings for a gateway serving about 2 million .eth domains before access was restored.
Ethereum Name Service gateway eth.limo was briefly hijacked through a social engineering attack targeting its domain registrar account. According to EasyDNS, attackers impersonated team members on April 17 and changed the domain’s nameservers to Cloudflare and Namecheap on April 18. EasyDNS said it restored account access at 7:49 a.m. ET. The affected wildcard DNS setup is used to resolve about 2 million .eth domains through the eth.limo gateway.