Ether.fi, a decentralized finance staking protocol, experienced a security incident on September 24 involving a malicious takeover of its domain and subdomains. Users were warned not to interact with the site or click on any links. Despite the attack, Ether.fi confirmed that all funds remained safe and no malicious code was served from the compromised domain. The attack targeted their domain registrar, Gandi.net. Ether.fi emphasized that official communications would be made through Twitter and Discord, and not via email. The attack involved phishing attempts, but Ether.fi's security, including hardware authentication, prevented further damage.