Two Polygon, Fantom Front-Ends Hit by DNS Attack

Two remote procedure call (RPC) interfaces for Polygon and Fantom were impacted in a domain name system (DNS) hijack attack on Friday, developers said.

RPC refers to a set of protocols that allow a client, such as MetaMask, to interact with a blockchain. DNS hijacking, on the other hand, is a type of cyber attack in which queries are manipulated in order to redirect users to malicious sites.

“Public RPC gateway provided by Ankr for Polygon (https://polygon-rpc.com) and Fantom (https://rpc.ftm.tools) were comprised via DNS hijack earlier today,” tweeted Polygon chief information security officer Mudit Gupta. “Use Alchemy or others while this is fixed.”

Gupta told CoinDesk in a Twitter direct message that the attack was a “middleware exploit.” He added: “No funds lost as far as we know but we are still investigating.”

Gupta added that decentralized applications (dApps) that used the RPC endpoint are currently unavailable. Meanwhile, at writing time, Gupta noted that Ankr had regained access to its RPC accounts.