Cream Finance, PancakeSwap Websites Compromised

DeFi protocol Cream Finance is experiencing its second hack of 2021. This time, attackers have targeted the website’s DNS and are using it to request users’ private keys and seed phrases.

According to the team, Cream’s smart contracts are fine, but hackers have taken control of the website. They’re now using this control to request users seed phrases and empty the account of those who fall in the trap.

Our DNS has been compromised by a third party; some users are seeing requests for seed phrase on https://t.co/Hr6S4Fqodo. DO NOT enter your seed phrase.

We will never ask you to submit any private key or seed phrases.

— Cream Finance