DeFi protocol Frax Finance has regained control over its domain names, frax.finance and frax.com, which were affected earlier in a potential hijacking attempt. The team worked with its domain registrar, Name.com, to restore the domains to their proper configurations.

Earlier today, Frax Finance encountered a security issue when it lost control over its primary domain names, leading the team to suspect a hijacking attempt.

Domain name system or DNS hijacking is a form of cyber-attack that involves unauthorized changes to a domain’s DNS settings. These alterations redirect the domain to another server and domain name set up for malicious activities, such as phishing user accounts.

In response to the incident, Frax Finance acted swiftly to address the situation. It contacted Name.com, the registrar for the aforementioned domain names, which confirmed that the domains had been returned to their correct DNS name servers and configurations.

Frax regained control

Frax Finance released a public announcement to inform users that the domains were secure and now safe to use, although an investigation into the situation is still underway.

"Name.com has reached out to us and confirmed the domains are now routed back to their proper DNS under our control. We’ve been told they will let us know what led to the incident after they conduct a full investigation tomorrow," the team stated.

Frax Finance added that a comprehensive investigation is due for tomorrow to determine the root cause of the issue.

Recent domain attacks have impacted projects such as the DeFi protocol Balancer and the web3 platform Galxe, resulting in user losses.