domain

Сообщение ChainCatcher, основатель Unstoppable Domains Мэтью Гулд заявил, что компания не подала заявку на свои Web3 доменные имена в рамках расширения ICANN 2026 года и вернет деньги клиентам, купившим соответствующие домены. Гулд отметил, что соблюдение норм, подача заявок и стоимость торгов для включения Web3 доменов в систему ICANN превышают ожидаемые компанией объемы продаж. Этот шаг завершает обещание компании с 2019 года о том, что домены .crypto, .wallet и другие в конечном итоге смогут разрешаться в обычных браузерах.Окно подачи заявок ICANN открылось 30 апреля и закрылось 12 августа, было получено более 1600 основных заявок. Гулд сообщил, что клиенты получили уведомления по электронной почте, но не опубликовал список затронутых доменных имен и условия возврата. Некоторые держатели доменов ставят под сомнение объем возврата, утверждая, что они держали домены на основании обещания Unstoppable продвигать заявку в ICANN. Гулд ответил, что Web3 домены все еще будут использоваться как активы на блокчейне для криптоторговли.Unstoppable продолжает участвовать в бизнесе ICANN в качестве поставщика услуг, ранее объявив о сотрудничестве с Telegram для подачи заявки на домен .gram. Тем временем, ENS выбрала другой путь, держатели токенов одобрили реорганизацию фонда ENS, чтобы бороться за доменное имя .ens в ICANN, но ENS не подает заявку на .eth, так как это резервный элемент кода страны ISO 3166-1.

CoW DAO announced that its domain registrar was subjected to a social engineering attack on April 14, during which the attacker briefly controlled the official domain for about 4.5 hours and directed users to a phishing website, thereby inducing them to sign malicious transactions. The project team emphasized that the CoW Protocol itself was not compromised, but some user assets were affected during that time window.In response to this incident, the CoW DAO community governance proposal CIP-86 has been approved, establishing a discretionary compensation fund to reimburse affected users for their losses. The official reminder states that eligible users must submit their claims by May 14, including affected wallet addresses, asset information, transaction hashes, and names, and apply via email at help@cow.fi, with the email subject clearly stating "Discretionary Grant Claim for".

CoW Swap tweeted that it has regained control of the cow.fi domain and has been operating normally on cow.finance for some time, and is currently gradually transitioning back to the original domain.The official statement indicated that the attacker deceived the DNS registrar with forged documents on April 14 to gain control of the cow.fi domain; the attacker deployed a highly realistic phishing website, implementing it in two phases: first, inducing users to sign malicious transactions through a wallet stealer, and then stealing mnemonic phrases and passwords through fake wallet pop-ups; this attack targeted the domain registrar and did not involve a breach of CoW Swap's own infrastructure or private keys. Affected users should use tools like Revoke.cash to revoke all authorizations and consider transferring funds to a new wallet.

According to market news, the domain name of the Bitcoin wallet Samourai Wallet, which was once famous for its privacy features, has now been taken over by scammers after being seized by the FBI, and is being used to host phishing sites to steal Bitcoin.Domain records show that the website was registered through a privacy protection service, and the current owner's identity is unknown. Multiple users on the X platform have reported the phishing site to the domain registrar NameCheap, requesting the site be shut down, but have not yet received a response.

According to Opensea data, the ENS domain defi.eth was sold about 16 hours ago for a price of 15 ETH (approximately $32,337.55). The buyer's address is 0x5716...0fdd, and the seller's address is 0x57b7...9e62.The last transaction record for this domain was on February 17, 2022, with a transaction price of 40 ETH, making this transaction price approximately 62.5% lower than the last one.

The DeFi protocol Neutrl stated on platform X that in response to the recent DNS hijacking incident, the team has migrated the official domain to a new address and switched to a new DNS service provider. The smart contract has been unpaused and is now operating normally.Neutrl further stated that all user funds are safe, and the protocol's net asset value (NAV) and reserve assets are stored in a custodial wallet, isolated through a custodial framework and over-the-counter settlement mechanism (OES), effectively avoiding front-end and infrastructure risks.The official reminder is that users should no longer access the original domain, which will gradually be phased out. Users who have interacted with the affected domain are advised to revoke related authorizations, including Permit2 authorizations for specified malicious addresses, and to clear all unknown authorizations.

Letsbonk.Fun founder Tom issued an urgent warning that the project's domain name has currently been hijacked by hackers. The hackers implanted an asset theft program (Drainer) at the domain level by controlling a team member's account. Tom advises all users not to visit or use any bonkfun-related domains until further notice to prevent asset loss.

According to SolanaFloor, Pump.fun has registered subdomains corresponding to Base, BSC, Monad, and Ethereum, which may signal the platform's early steps towards multi-chain expansion.At the same time, Pump.fun has also removed the Solana logo from its X platform account homepage, further fueling market speculation about its cross-chain expansion plans.

According to market news, Coinbase, in collaboration with Microsoft, Europol, and more than ten other organizations, successfully shut down the phishing-as-a-service platform Tycoon 2FA and seized 330 related domains.Since its launch in August 2023, Tycoon has had approximately 2,000 users, operating over 24,000 domains, and sending tens of millions of fraudulent emails each month to over 500,000 businesses worldwide. It bypassed multi-factor authentication by stealing session cookies and tokens, primarily targeting email and online service accounts such as Microsoft 365, Outlook, and Gmail.In this operation, Coinbase assisted in tracking the cryptocurrency payments funding Tycoon’s operations and supported the civil lawsuit to seize the domains. The main developer has been identified as Saad Fridi, a Pakistani national.

RWA tokenization platform OpenEden posted on X platform that the DNS of its official website and portal seems to have been tampered with, reminding users not to interact with the aforementioned domains to prevent damage to wallet assets.OpenEden stated that all reserve assets are still safe (SAFU) and relevant data can be verified through Chainlink's reserve proof page. However, the team reiterated that users should not access or operate the aforementioned domains. The OpenEden team is investigating the matter and will release further updates as soon as possible.

Crypto.com CEO Kris stated that after acquiring the AI.com domain for $70 million, he received offers exceeding $500 million to purchase the domain.

According to Malay Mail, Malaysian tech entrepreneur Arsyan Ismail sold the domain name ai.com in April 2025 for a reported amount of up to $70 million (approximately 301 million ringgit at the time), thus generating over 300 million ringgit in revenue.In 1993, at just 10 years old, Arsyan used his mother's credit card to register the domain for only $100. At that time, he did not foresee the current boom in artificial intelligence; the reason for the purchase was simply that "AI" happened to be the initials of his name. This seemingly inexplicable $100 charge even left his mother, who was unaware of the domain name, confused at one point.As a tech veteran with over 30 years of experience, Arsyan has been involved in early internet projects like Friendster and was an early adopter of Bitcoin. Reflecting on this life-changing deal, his advice is: never overplay your hand or try to "entice" ultra-high-net-worth individuals during negotiations, as it may lead to losing a significant opportunity over minor details.

According to the Financial Times, Kris Marszalek, co-founder and CEO of Crypto.com, purchased the ai.com domain last spring through broker Larry Fischer, with the transaction price exceeding twice the over $30 million deal for voice.com, setting a new record.Since April, he has assembled a team to develop autonomous AI agents, aiming to handle practical tasks such as stock trading and schedule management through a private and user-friendly architecture, dedicated to building a decentralized network that advances the development of general artificial intelligence.It is reported that Kris Marszalek previously spent $12 million to acquire the crypto.com domain, completing the transaction and making it public around July 2018.

According to 23pds, the Chief Information Security Officer of Slow Fog Technology, a new type of security vulnerability has emerged in the Snap Store application store on the Linux platform. Hackers are taking over application publisher accounts by hijacking expired domain names and embedding malicious code into cryptocurrency wallet applications.Attackers monitor and register developer accounts in the Snap Store associated with expired domain names, using these domain emails to trigger password resets, thereby taking over the established publisher identity with long-term credibility. The tampered applications disguise themselves as well-known cryptocurrency wallets such as Exodus, Ledger Live, or Trust Wallet, with interfaces nearly indistinguishable from the originals.Currently, it has been confirmed that the publisher domains storewise[.]tech and vagueentertainment[.]com have been hijacked. These malicious applications lure users into entering their "wallet recovery mnemonic." Once users submit this information, sensitive data will be sent to the attackers' servers, resulting in the theft of digital assets.

Binance Wallet posted on platform X that it has discovered a hack on the ZEROBASE platform's frontend, which has led to some users being induced to authorize malicious contracts. To ensure asset security, Binance Wallet has taken three emergency measures: blocking suspected malicious website domains, blacklisting related malicious contracts, and committing to send alerts to potentially affected users within 30 minutes.

According to Decrypt, the U.S. Department of Justice has seized the scam website tickmilleas.com, which is operated by Myanmar's "Taichang Scam Park" and is used to disguise a cryptocurrency trading platform to deceive investors.The FBI stated that several victims have recently been scammed. This action is related to the previously sanctioned Cambodian Huione Group, which has closed its Phnom Penh branch and suspended withdrawals this week.

Domain Financial Infrastructure D3 Global Announces Doma Protocol Mainnet LaunchD3 Global today announced the official launch of the Doma protocol mainnet, introducing the world's first domain names that can be traded as tokenized assets.It is reported that this mainnet launch features multiple high-end domain assets, providing backing for token trading pairs on Doma. This landmark integration demonstrates how Doma transforms high-value domain names into liquid tradable assets while preserving the underlying DNS compatibility and intrinsic value of the domain names. By splitting scarce assets like Software.ai into ERC-20 tokens, Doma breaks the monopoly previously held by a few high-capital holders of premium domain names.In addition, Doma will strategically collaborate with registrars to bring over 36 million domain names on-chain, creating a global network. Token holders can trade partial ownership of the underlying domains, provide liquidity to earn transaction fees, or unlock utility functions through long-term staking, while the domains themselves retain their value as internet assets compliant with DNS standards.

According to Aerodrome, the domain hijacking attack that the agreement previously encountered was fully mitigated in less than 4 hours, with user losses amounting to approximately $700,000.It is reported that within 2 minutes of the first malicious transaction being detected, major wallets such as MetaMask and Coinbase Wallet began displaying warnings. Losses were limited to users who connected and signed transactions during the active period of the malicious website. Currently, the team is working with security consultants and corporate registrars, and the domain is expected to be migrated and reopened next week. Additionally, the Aero and Velo foundations are developing plans to provide grants proportional to the losses for affected users.

The decentralized trading platform Aerodrome stated on platform X that centralized domains (.finance and .box) still pose security risks. Please refrain from using these two domains for the time being. All smart contracts remain secure.

Base ecosystem DEX Aerodrome officially announced on platform X that the team is investigating a potential DNS hijacking incident. Please do not use the main domain of the website, as it is under investigation.