HypurrFi Investigates Domain Hijacking and Warns Users to Avoid Its Lending Protocol
HypurrFi said its domain was hijacked but the protocol, user funds, and team infrastructure were unaffected, as the team migrated services to hypurrfi.com and later regained control of hypurr.fi.
Fact Check
The claim is well supported by the fetched PANews article, which specifically states that HypurrFi said hypurr.fi was hijacked, that services/infrastructure were migrated to hypurrfi.com, that the protocol, user funds, and team infrastructure were unaffected, and that the team later regained control of hypurr.fi. The fetched crypto.news article independently corroborates the warning to avoid the app/domain and says there was no sign user funds were at risk, consistent with a frontend/domain incident rather than a protocol compromise. Odaily's article traces upstream to The Block piece on the same event, providing additional corroboration, although I could not directly fetch The Block or the X post in this run. Overall, the available evidence matches the user's statement closely, with only a modest reduction in confidence because the original social post could not be directly retrieved.
Summary
HypurrFi said its hypurr.fi domain was hijacked, but stated that the protocol, user funds, and team infrastructure were unaffected. The DeFi lending protocol initially migrated its infrastructure to hypurrfi.com and instructed users not to use hypurr.fi while DNS changes propagated. It later said control of hypurr.fi had been restored through the registrar, though DNS propagation could take up to 24 hours.
Terms & Concepts
- DeFi: Short for decentralized finance, a category of blockchain-based financial services such as lending, borrowing, and trading without traditional intermediaries.
- Domain hijacking: Unauthorized control of a website domain, which can be used to redirect users to malicious or misleading pages.
- DNS propagation: The period after domain record changes when updated routing information spreads across internet servers, causing temporary differences in site access.