Share this article
Compound Finance, Celer Site Compromised in Phishing Attack
The website leads to a phishing page that could drain user funds, but the actual protocol remains unaffected.
Updated Jul 11, 2024, 12:27 p.m. Published Jul 11, 2024, 11:35 a.m.
Decentralized finance giant Compound Finance's frontend was compromised earlier on Thursday and now hosts a phishing site, developers said in an X post. Shortly afterward, blockchain project Celer's developers said the site was hit by a malicious actor as well, and hosts a draining service.
"We are investigating a potential DNS domain attack that seems to be hitting multiple projects at the same time," Celer developers said in an X post.
STORY CONTINUES BELOW
The compound(.)finance site leads to the "compound-finance.app" as of European morning hours Thursday.
Security researcher Michael Lewellen noted that the latter is a draining tool that will empty funds if a user interacts with it. As such, the actual Compound protocol remains unaffected, and all existing user deposits are safe.
ALERT: The https://t.co/vSAGYl6wwJ URL has been compromised and is currently hosting a phishing site. DO NOT interact with the https://t.co/vSAGYl6wwJ website until further notice.
— Michael Lewellen (@LewellenMichael) July 11, 2024
The Compound protocol itself is not impacted and all smart contract funds are safe.
Compound allows users to deposit, lend and borrow tokens using the Ethereum blockchain. It holds over $2.3 billion worth of assets as of Thursday, making it one of the biggest DeFi services in the industry.
Phishing attacks are the practice of sending fraudulent communications that appear to come from a reputable source. These are a major concern across the cryptocurrency market, with over $104 million stolen from unsuspecting users in the first two months of 2024 alone.
Compound's COMP token prices were little changed in the past 24 hours, CoinGecko data shows.
UPDATE (July 11, 12:30 UTC): Updates headline and story with Celer network compromise.
More For You
What to know:
- As of October 2025, GoPlus has generated $4.7M in total revenue across its product lines. The GoPlus App is the primary revenue driver, contributing $2.5M (approx. 53%), followed by the SafeToken Protocol at $1.7M.
- GoPlus Intelligence's Token Security API averaged 717 million monthly calls year-to-date in 2025 , with a peak of nearly 1 billion calls in February 2025. Total blockchain-level requests, including transaction simulations, averaged an additional 350 million per month.
- Since its January 2025 launch , the $GPS token has registered over $5B in total spot volume and $10B in derivatives volume in 2025. Monthly spot volume peaked in March 2025 at over $1.1B , while derivatives volume peaked the same month at over $4B.
Más para ti
Solana’s Drift Launches v3, With 10x Faster Trades
With v3, the team says that about 85% of market orders will fill in under half a second, and liquidity will deepen enough to bring slippage on larger trades down to around 0.02%.
Lo que debes saber:
- Drift, one of the largest perpetuals trading platforms on Solana, has launched Drift v3, a major upgrade meant to make on-chain trading feel as fast and smooth as using a centralized exchange.
- The new version will deliver 10-times faster trade execution thanks to a rebuilt backend, marking the largest performance jump the project has made so far.
Top Stories
