ChainBleedv0.1 · open intel
← back to feed·INFRASTRUCTURE2026-03-19 · 2mo ago
Incident · SLOWMIST

Neutrl

DNS Hijacking
Estimated loss
VERDICT —OUT OF SCOPE
Root cause is infrastructure (DNS / cloud / database / third-party API) compromise, not on-chain contract logic. Pre-deployment source review would not surface this; coverage lives in cloud-security + supply-chain audit, separate discipline.
▰ METHOD
INFRASTRUCTURE
INFRASTRUCTURE
Root cause

Root-cause analysis not yet published. The incident description below contains all currently available signal — review the attack transaction directly for definitive forensics.

Forensic narrative

The DeFi protocol Neutrl announced on platform X that its frontend appears to have been compromised and that the team is conducting an urgent investigation. Out of an abundance of caution, the official advisory recommends that users refrain from interacting with the website until further updates are released. Additionally, Neutrl urged users to immediately revoke Permit2 approvals for relevant addresses via Revoke.cash. Users were also reminded to check and revoke approvals granted to other suspicious addresses to mitigate potential asset risks.Subsequently, Neutrl's preliminary investigation revealed that the DNS provider hosting the application's domain was subjected to a social engineering attack, resulting in the redirection of the domain by the attackers. Attack method (per SlowMist): DNS Hijacking. Reported loss: -.

Primary source
https://x.com/Neutrl/status/2034445580840370211
Sourced from
slowmist
Technical record
chain
protocol
Neutrl
bug_class
infrastructure
date_occurred
2026-03-19
loss_usd
source_id
sm:neutrl::2026-03-19
Related — same bug class· infrastructure
2026-04-18
1mo ago
Kelp DAO
Infrastructure-level attack
infrastructure
$293.00M
OUT OF SCOPE
2026-04-18
1mo ago
DNS registrar for eth.limo
DNS hijacking
infrastructure
OUT OF SCOPE
2026-04-04
2mo ago
HypurrFi
Domain Hijacking
infrastructure
OUT OF SCOPE
2026-03-31
2mo ago
Steakhouse Financial
Social Engineering
infrastructure
OUT OF SCOPE
2026-03-18
2mo ago
ETH
Neutrl
DNS Hijacking Attack
infrastructure
OUT OF SCOPE
2026-03-11
3mo ago
BONKfun
Social Engineering Attack➕Domain Hijacking➕Phishing
infrastructure
$30.0K
OUT OF SCOPE
ChainBleed — live web3 threat intelligence