TechFlow reported that Kelp DAO, a liquid staking protocol, stated user asset security is its top priority. On July 22 at 22:30 Beijing time, Kelp's dApp began displaying transaction activity from a malicious wallet attempting to steal user funds. The Kelp team responded immediately by locking the domain server, restoring ownership access, and resolving the issue. The attacker had impersonated the Kelp team and successfully convinced GoDaddy customer support to bypass 2-FA. The Kelp team is now taking preventive measures, including migrating to another domain registrar and enhancing alerts for abnormal UI behavior. A small number of users reported fund losses due to the UI attack, and the Kelp team is providing support.
Add to Favorites
Share to Social Media
