Following the recent DNS hijacking incident, the Neutrl domain has been successfully migrated to https://t.co/XlWqYSjSc0 and is now secured on a new DNS provider.
Neutrl smart contracts have been unpaused and are fully operational.
ALL USER FUNDS ARE SAFE.
Protocol NAV, including reserves and user funds, remains secure within Neutrl’s custodial wallets, supported by a custody framework and off-exchange settlement (OES) that isolates funds from front-end and infrastructure risks.
Users should no longer interact with neutrl[.]fi under any circumstances and should only use the new domain moving forward. The .fi domain will be sunset.
As an added precaution, users who interacted with the compromised domain are advised to review and revoke permissions via revoke[.]cash, including any Permit2 approvals associated with the following malicious addresses:
0x23f2741EaA0045038e9b52100CdcC890163dE53F
0xa0Adf074056E41dfB892aFC69881E15073b384b9
Please also revoke any approvals associated with addresses you do not recognize.
We extend our sincere gratitude to the teams at @0xGroomLake and @SEAL_911, whose support and expertise were instrumental in our response. Their work in strengthening security across the ecosystem is invaluable.
Additional updates will be shared as they become available, along with a full post-mortem.
We’re currently investigating a potential malicious event affecting the Neutrl front end.
Our team is actively investigating. Out of an abundance of caution, please do not interact with the website until further updates are provided.
Out of an abundance of caution, users should visit https://t.co/w1z7euk9Ce to revoke Permit2 approvals for the following addresses:
0x23f2741EaA0045038e9b52100CdcC890163dE53F
0xa0Adf074056E41dfB892aFC69881E15073b384b9
Users should also revoke approvals for any other addresses they do not recognize.
Update on the ongoing security incident:
We are currently working with @0xGroomLake on the investigation. Initial findings suggest the DNS provider hosting the app domain was socially engineered, allowing an attacker to redirect the domain.
Neutrl smart contracts remain secure and have been temporarily paused as a precaution. Please do not interact with the protocol until further notice is provided.
We will continue to share updates as more information becomes available as well as a full post mortem.
Out of an abundance of caution, users should visit https://t.co/w1z7euk9Ce to revoke Permit2 approvals for the following addresses:
0x23f2741EaA0045038e9b52100CdcC890163dE53F
0xa0Adf074056E41dfB892aFC69881E15073b384b9
Please also revoke approvals for any other addresses you do not recognize.
Neutrl is one of the fastest growing synthetic dollar protocols generating high yield.
They introduce a completely new approach called OTC Arbitrage.
We break down what @Neutrl is, how the OTC Arbitrage strategy works and why it's so different in the current market.