Neutrl Restores Operations After DNS Hijack and Moves to New Domain

Neutrl says smart contract operations have resumed after the DNS hijack, while NAV and reserve assets remain isolated in custody wallets through its custody framework and OES.

Summary

Neutrl said it has resumed smart contract operations after a DNS hijack incident and migrated its official domain. The protocol stated that all user funds remain safe, with NAV and reserve assets held in custody wallets and isolated through its custody framework and OES. Users were warned to avoid the old domain and to revoke related approvals, including Permit2 permissions granted to a specified malicious address.

Terms & Concepts
  • DNS hijack: A cyberattack that redirects a legitimate website domain to a malicious destination, potentially exposing users to phishing or unauthorized approvals.
  • Permit2: A token approval mechanism that allows spending permissions across applications and may need to be revoked after a security incident.
  • NAV: Net asset value, a measure of the value of assets minus liabilities, used here in relation to the protocol’s protected reserve structure.