In a recent phishing hack incident, Bitcoin Ordinals marketplace Ordswap has suffered a security breach—and consequently lost control of its website domain. With the platform’s website now compromised, fears loom large that users’ private keys and assets are at risk for phishing attacks.
Ordswap users at risk for phishing attacks after website hack
On October 9, several Ordswap users reportedly saw a button pop up while accessing the now-hacked website. As per the users’ account of the ordeal on the project’s Discord server, this button was a crypto drainer and attempted to phish users.
Additionally, some users chronicled their horrifying experience on social media platform X. They claim Ordswap’s website has been directing them to a phishing link.
Sigh of relief for Ordswap users
With Ordswap users facing a severe threat to their crypto assets, the platform has swooped in with a new online tool. The tool is designed to help users retrieve their private keys. In a post on X, the company said that users who logged into the platform through MetaMask can use it to securely transfer their assets to another provider.
Ordswap assures user assets not compromised—yet
Bitcorn – one of the members of Ordswap’s support team – has affirmed that the website’s breach has not compromised customers’ private keys and assets. But vulnerabilities do persist on the platform, so users have been warned not to engage with the compromised website.
Meanwhile, Ordswap has pinned the blame of glitch on Netlify—a company that specializes in website development and hosting services. The link between Netlify and the said security breach hasn’t been ascertained yet. But the incident serves as a stark reminder of the security vulnerabilities in crypto platforms.
In recent years, crypto industry has become a hotbed for phishing scams. According to a Todayq News report, phishing attacks in the crypto space surged by 40% in 2022. Most recently, a phishing scam has drained 11 Hong Kong-based Binance users out of a whopping $450,000. In June, Layer-1 blockchain Terra froze its website owing to concerns surrounding phishing attacks.
