Kelp DAO, a liquidity staking protocol, recently addressed a security incident that occurred on July 22. The malicious activity was detected by Kelp's dApp at 22:30, prompting an immediate response from the team. The attackers attempted to steal user funds by impersonating the Kelp team and manipulating GoDaddy customer support into bypassing two-factor authentication.

The Kelp team swiftly took control of the situation by locking the domain server, restoring ownership access, and resolving the issue. To prevent similar incidents in the future, the team is implementing additional measures, including switching to a different domain registrar and enhancing alerts for abnormal user interface behavior. Although a few users reported losing funds due to the UI attack, the Kelp team is providing support to those affected.

The security incident highlights the importance of vigilance and swift action in the face of malicious activity. The Kelp team's prompt response and proactive measures demonstrate their commitment to protecting user funds and maintaining the integrity of their protocol. The incident also serves as a reminder of the need for users to remain cautious and report any suspicious activity.

The Kelp team's decision to move to a different domain registrar and enhance alerts for abnormal UI behavior demonstrates their dedication to learning from the incident and improving their security measures. By taking proactive steps, the team aims to prevent similar incidents and ensure the continued safety and security of user funds.

In the aftermath of the security incident, the Kelp team is working closely with affected users to provide support and minimize the impact of the attack. The incident serves as a reminder of the importance of collaboration and transparency in maintaining the security and integrity of decentralized protocols.