Earlier today, on October 17 the website of Ambient Finance was hacked. The users were notified by the team to hold any interaction with the site, connect wallet, or any transactions at the moment.
The Ambient Finance website domain (ambient dot finance) has been hijacked and compromised.
The issue is isolated to the frontend website, Ambient contracts are unaffected and funds are safe.
Please do not visit the website or click any links until further notice. An update…
— ambient (@ambient_finance) October 17, 2024
The team also gave assurance to the customers regarding no harm to their contracts or funds.
Ambient Finance recovered the website domain
The website was recovered shortly after the hack. However, it is still waiting on a DNS propagation update. Users were told to keep waiting until they received an “all clear” signal from the team.
In an update posted on X platform, Ambient Finance revealed that its website domain was hacked but the compromised website is an isolated incident, ensuring customers their funds and contracts would remain safe.
“The Ambient Finance website domain (ambient dot finance) has been hijacked and compromised,” wrote Ambient.
“The issue is isolated to the frontend website, Ambient contracts are unaffected and funds are safe. Please do not visit the website or click any links until further notice. An update will be provided when available,” warned Ambient.
A security firm, Blockaid revealed that malware meant to steal digital assets known as Inferno Drainer was used in the hack. The security firm also noted that it appeared this was designed specifically for this attack as the C2 server that launched the attack was registered in the last 24 hours ahead of the hack.
Users not happy with Ambient Finance
Responding to the announcement on X platform, some users expressed disgruntlement at the firm for taking long to notify users. Some of the users revealed they suffered losses from interacting with the platform during the attack, while others asked if there would be a refund.
“I lost money due to this hack. Will there be a refund?” quizzed one enthusiast while others accused the Ambient team of being a “joke” for notifying users on X, hours after the attack, subjecting more people to losses.
“Connected some few minutes before you dropped this mssge. Now my entire port is wiped out,” said a user identified as Female King.
Others felt the need to remind the company to enhance its security and response rate.
India Crypto Research highlighted that security should be a major priority for firms when dealing with crypto-related products or they risk losing credibility before the users.
However, Ambient Finance said it was concerned with the security of its users, encouraging them to revoke all approvals while they investigated the matter and ensure users to incur further losses.
“With user security being our first concern, we recommend all users to temporarily revoke approvals to our contract until we further investigate the recent compromise,” wrote Ambient.
This incident is not unique to Ambient alone, but it has become prevalent with scammers targeting digital assets as malware becomes sophisticated. Developers reportedly believed that Apple’s macOS was generally immune to malware.
However, there has been an increase in malware targeting macOS systems. Earlier, in August this year, cybersecurity firms identified a new form of malware known as “Cthulhu Stealer.”
This malware reportedly disguises itself as a genuine macOS program installed on the desktop and steals sensitive data as well as private key, emptying crypto wallets in the process.
Cryptopolitan Academy: Want to grow your money in 2025? Learn how to do it with DeFi in our upcoming webclass. Save Your Spot
