🚨 MyEtherWallet.com HACKED and currently unsafe to use !! 🚨
Bad news with regards to the popular MyEtherWallet.com, the most popular web-based Ethereum wallet. It has suffereda DNS attack, and the website is currently compromised. Do not use MyEtherWallet until further notice, for your own security!
DNS HACK
MyEtherWallet's team is still on the good side, but the hack happened on the domain-name level, where the hackers have devised a way to re-route traffic from MyEtherWallet.com to their own servers. Since this is a DNS hack at the domain level, the domain will show myetherwallet.com as regular even if you're unknowingly visiting other servers than you think! From the reports it sounds as if the hackers found a way to do this through a hack on OpenDNS.The hackers have been re-routing all Ethereum transactions to their own private addresses, instead of to the address that users sent the funds to.
WHAT TO DO
If you haven't visited MyEtherWallet lately, then you have nothing to worry about. Your funds are on the blockchain and they cannot steal them, unless you visit the website to make a transaction (in which case they may re-route it to somewhere else).If you have visited MyEtherWallet today, then it is of the utmost importance that you check your funds immediately on www.etherscan.com to see if none are missing. After that, it would be highly recommended to move your funds to a new, fresh wallet address but of course do not use MyEtherWallet for this! An alternative is MyCrypto.com, or you can go to the Github of MEW where you can download the offline version which is safe.
🚨Whatever you do, do not use MyEtherWallet for anything
until it is widely confirmed to be safe again if you value your funds.🚨
Sadly, again the problems of centralization rear their ugly head again. Although Ethereum is decentralized (kind of!), service providers and websites like MyEtherWallet are not. In a truly decentralized world, MEW would use decentralized name servers as well instead of the old centralized DNS servers.
Still, I wonder if anything can ever truly be decentralized. There will always be some kind of interface that connects to the blockchain, and this will likely always have risks attached to it.
I'm protected thanks to MetaCert and Cryptonite! I's a browser extension for Chrome and Firefox and is the first really working phishing protection.