Connect with us
DAPA Banner

Crypto World

Lawsuits are piling up against Binance over Oct. 10

Published

on

Lawsuits are piling up against Binance over Oct. 10

Social media sentiment continues to turn against Binance for its alleged role in crypto liquidations on October 10.

Immediately after October 10, traders were already threatening legal action. However, this year, new lawsuits and arbitrations look to be underway, along with numerous other complaints and legal setbacks.

A simple chart of crypto asset prices illustrates the reason for the dogpile of complaints against Binance.

Following months of clear correlation with broad indices like the S&P 500 and Nasdaq 100, crypto decoupled precisely on October 10 — and has trended downward ever since.

Advertisement
Total crypto market capitalization vs. S&P 500 and Nasdaq 100. Source: TradingView

Read more: Binance’s $1B BTC buy fails to win back trust after Oct. 10

October 10 auto-deLeveraging

As the world’s largest crypto exchange, Binance had a unique role to play in October 10.

For example, flash-crash prices as low as 99.9% existed only on the exchange on that date, and it had just changed its pricing feeds and treatment of a major stablecoin, Ethena USDE.

Wintermute CEO Evgeny Gaevoy called Binance’s Auto-DeLeveraging prices “very strange,”  while Ark Invest’s Cathie Wood blamed billions in crypto liquidations on a Binance “software glitch.”

A post with millions of impressions also called out errors in Binance’s pricing oracles for cross-margin unified accounts.

Advertisement

Ethena USDE played a particularly important role in Binance’s October 10 liquidations. After crashing to less than $0.67 on Binance, USDE has regained its $1 peg but has shed more than half its market capitalization since 10/10.

Binance attempts to restore confidence

Without admitting to responsibility, Binance nonetheless quickly — and voluntarily — agreed to pay huge sums of money to customers that suffered losses on that date.

Advertisement

Shortly after the event, Binance announced $328 million in compensation plus another $400 million worth of loans and vouchers.

In another attempt restore confidence amid the bearish knock-on effects of October 10, Binance announced in late January 2026 that it would use its entire $1 billion SAFU (Secure Asset Fund for Users) emergency reserve to buy bitcoin (BTC) over a 30-day period.

It has not helped much. The giant BTC buy failed to win back its fans-turned-critics, with negative topics about Binance still trending on social media on a nearly daily basis.

As pressure continues to build over the exchange’s role in the historic liquidation event, founder Changpeng Zhao has blamed fake social media and unrelated bitcoin traders for bearishness.

Advertisement

He also attempted to divert blame from Binance onto Donald Trump for the crash, saying, “It’s pretty clear that the tariff announcements preceded the crash, not Binance system issues or Binance doing anything.”

Got a tip? Send us an email securely via Protos Leaks. For more informed news, follow us on X, Bluesky, and Google News, or subscribe to our YouTube channel.

Advertisement

Source link

Continue Reading
Click to comment

You must be logged in to post a comment Login

Leave a Reply

Crypto World

Friday’s eth.limo Hijack Caused by Social Engineering on EasyDNS

Published

on

Friday’s eth.limo Hijack Caused by Social Engineering on EasyDNS

Ethereum Name Service gateway eth.limo has revealed that the domain hijacking on Friday was caused by a social engineering attack directed against EasyDNS, its domain name service provider. 

According to a postmortem published by eth.limo on Saturday, an attacker impersonated one of its team members to initiate an account recovery process with easyDNS, granting access to the eth.limo account and allowing them to alter domain settings.

“The NS records were changed and directed to Cloudflare… Once we understood that a DNS hijack had taken place, we immediately notified the community as well as Vitalik Buterin and others. We then began contacting EasyDNS in an attempt to respond to the incident,” the company said.

Eth.limo serves as a Web2 bridge, providing access to around 2 million decentralized websites using the .eth domain name. Hijacking the service could allow an attacker to redirect users to malicious websites. Ethereum co-founder Vitalik Buterin warned users Friday to avoid his blog until the incident was resolved.

Advertisement

Mark Jeftovic, CEO of easyDNS, has publicly accepted responsibility for the incident in its own postmortem report. 

“We screwed up and we own it,” said Jeftovic on Saturday. 

“This would mark the first successful social engineering attack against an easyDNS client in our 28-year history. There have been countless attempts.”  

Both companies have pointed to the Domain Name System Security Extension (DNSSEC) in thwarting the hacker’s attempts to do further damage. 

The attacker couldn’t produce valid cryptographic signatures, so Domain Name System resolvers rejected the attacker’s forged DNS responses, causing users to see error messages instead of being redirected to malicious sites. 

Advertisement

“DNSSEC was enabled for their domain when the attackers attempted to flip their nameservers, presumably to effect some manner of phishing or malware injection attack, DNSSEC-aware resolvers, which most are these days, began dropping queries,” Jeftovic said. 

Source: eth.limo

In its postmortem, eth.limo noted that because the attacker lacked the signing keys, they were unable to bypass the safeguards, which likely “reduced the blast radius of the hijack. We are not aware of any user impact at this time. We will provide updates if that changes.”

easyDNS makes changes since the attack

Jeftovic described the social engineering attack as “highly sophisticated,” and said easyDNS is still conducting a post-mortem on how the breach occurred, and has already begun rolling out changes to prevent a recurrence.

Source: easyDNS

“In eth.limo’s case, we will be migrating them to Domainsure, which has a security posture more suited toward enterprise and high-value fintech domains, TLDR there is no mechanism for an account recovery on Domainsure, it’s not a thing,” he added.

“On behalf of everyone here, I apologize to the eth.limo team and the wider Ethereum community. ENS has always had a special place in our heart as the first registrar to enable ENS linking to web2 domains and we’ve been involved in the space since 2017.”

Related: RaveDAO denies manipulation as Binance, Bitget probe RAVE trading activity

Advertisement

The eth.limo incident is the latest in a series of domain hijackings targeting crypto projects. Days earlier, decentralized exchange aggregator CoW Swap lost control of its website after an unknown party hijacked its domain. 

Steakhouse Financial, a DeFi advisory and research firm, similarly disclosed at the end of March that it had lost control of its domain to an attacker.

Magazine: Will the CLARITY Act be good — or bad — for DeFi?