Ethereum Name Service resolver briefly taken over

April 19, 2026

websites associated with example.eth. This incident serves as a reminder of the ongoing threat of social engineering attacks targeting blockchain projects and the importance of securing domain names.

The hijacking of the nameservers for eth.limo, a website resolver for alt-root .eth domains, highlights the vulnerability of crypto projects to malicious activities. In this case, the perpetrator managed to trick an individual at EasyDNS into granting access to change the nameservers, resulting in the temporary hijack of the site. Fortunately, the Ethereum Name Service (ENS) was able to limit the damage through the use of DNSSEC, a security protocol that helped detect the malicious changes and prevent the attacker from producing valid responses.

According to ENS, the validation process of resolvers checking the attacker’s responses against the legitimate DS record cached from the parent zone helped to break the chain of trust and minimize the impact of the hijack. This incident underscores the importance of implementing strong security measures, such as DNSSEC, to protect against social engineering attacks and unauthorized access to domain names.

The reverting of the nameservers to the correct ones emphasizes the swift response and mitigation efforts of ENS to restore the integrity of the domain resolver. Eth.limo plays a crucial role in providing users with a convenient way to access websites linked to .eth domains, especially since .eth is not part of the ICANN root and requires special browsers or plugins for access. By adding .limo to the end of an .eth domain, users can easily resolve the website and access the content without additional steps.

In conclusion, the recent hijacking of the Ethereum Name Service resolver serves as a cautionary tale for blockchain projects to prioritize the security of their domain names. Social engineering attacks pose a significant threat to the integrity and availability of crypto-related websites, making it essential for project owners to implement robust security measures to safeguard against unauthorized access and potential disruptions. The use of technologies like DNSSEC can help mitigate the impact of such attacks and prevent malicious actors from compromising domain resolvers.