Social Engineering Attack Hijacks Ethereum Gateway eth.limo as EasyDNS Admits Failure

eth.limo is a Web2 gateway for the Ethereum Name Service, or ENS, that allows conventional browsers to access decentralized websites across roughly 2 million .eth domains. The incident highlights how decentralized content remains dependent on traditional registrar accounts and DNS processes. A compromised gateway could redirect traffic to phishing or malicious websites.

At 7:07 p.m. ET on April 17, 2026, an attacker impersonating an eth.limo team member deceived EasyDNS staff during its account recovery process. The attacker altered the NS records at 2:23 a.m. on April 18, and they were restored at 7:49 a.m. EasyDNS CEO Mark Jeftovic acknowledged the failure. DNSSEC limited the damage, no financial losses were disclosed, and Vitalik Buterin urged users to temporarily avoid the affected domains.