Skip to content
Basis Desk

New from Basis Desk: free Telegram proxies for places where Telegram is blocked or slowed down.Connect in one tap →

Security & Hacks · 1 min read

Name.com Probes Domain Takeovers Hitting 10 Vercel-Linked DeFi Front Ends

Vercel confirmed that 10 associated domains were hit in an ongoing campaign targeting crypto organizations, with control now restored.

Editorial oversight: Julian Mercer, Chief Editor
Bearish

At a glance

What happened
Domain registrar Name.com launched an inquiry into a domain takeover campaign that affected 10 crypto front ends linked to Vercel.
Why it matters
The incident demonstrates infrastructure vulnerabilities at the domain registrar level that can disrupt decentralized finance applications.
Who is affected
Name.com, hosting provider Vercel, and 10 unnamed decentralized finance organizations whose domains were impacted.
What's next
Name.com will publish findings and status updates regarding the root cause in its incident thread.
Primary source
vercel.com: Wallet-Drainer Attack on DeFi Front Ends Traces to Name.com, With Cause Still Unclear

Key points

  • Domain registration partner Name.com opened an investigation into a domain takeover campaign targeting crypto and DeFi firms.
  • Cloud infrastructure provider Vercel confirmed that 10 domains linked to its platform were impacted.
  • Name.com has restored all 10 compromised domains, and Vercel stated that no customer action is required.

Domain registrar partner Name.com is investigating a domain takeover campaign aimed at decentralized finance (DeFi) organizations, according to an incident notice published by cloud platform Vercel 1.

Vercel stated that it identified 10 domains connected to its hosting infrastructure that were impacted during the incident 1. Name.com has since recovered and restored the affected web addresses 1. Vercel noted that it is actively communicating with the affected customers and assisting Name.com with the inquiry into the campaign 1. The hosting platform added that no further action is currently required from its users 1.

Web Infrastructure Risks

The root cause behind the takeover campaign remains unclear, according to Vercel's bulletin 1. The provider did not publicly name the specific decentralized finance organizations whose web domains were altered during the wave 1.

Attacks targeting web-level interfaces pose persistent challenges for decentralized applications. Incidents involving front-end tampering often overlap with techniques detailed in How Crypto Wallet Drainers Work: Phishing, Approvals, and Defense, as well as supply-chain intrusions such as the Malicious DebugBear Script Injected Into Polymarket Drains Trader Assets. In domain-level takeovers, attackers alter domain name system (DNS) records or account registrations directly with registrars, circumventing core infrastructure controls to divert visitors.

At the time of writing, major crypto markets remained mixed, with $BTC trading at $77,838 and $ETH changing hands at $2,283. Vercel stated that Name.com will publish further status updates directly within its ongoing incident thread as the investigation progresses 1.

Sources

  1. [1] Wallet-Drainer Attack on DeFi Front Ends Traces to Name.com, With Cause Still Unclear — vercel.com, November 2, 2026

Written by Basis Desk's newsroom system from the primary sources above and machine-verified against them before publication. Market figures marked "at the time of writing" come from live exchange data. Report an error: corrections@basisdesk.news · corrections policy.

Community read
How do you read this story for the assets involved? One vote a day, anonymous.
Be the first to vote

The Daily Brief, in your inbox at 07:00 ET

Five stories, the numbers that moved, what to watch. Three minutes. No hype, no advice, unsubscribe in one click.

Not financial advice. Basis Desk publishes information, not recommendations. Crypto assets are volatile and you can lose what you invest.