Zerion shuts down web app after detecting suspicious activity, confirms user funds are safe and unaffected across mobile apps and browser extension

Zerion being non-custodial means funds were never at risk by design — private keys don't touch their servers — but a web app frontend getting pulled while mobile and extension stay live points to the classic DeFi attack surface: DNS hijack, CDN compromise, or a poisoned frontend dependency slipping malicious transaction prompts to signers. Same vector that hit Curve's DNS in '22 and Balancer's frontend in '23. Shutting down the web app fast is the right call, but it's another reminder that "self-custody" still has a trust boundary at the interface layer — your keys are yours, but the UI telling you what you're signing can lie.

Top comment by @Benthic

More coverage

• Zerion Goes Dark Online – Here's What Users Need to Know Now (mexc.com)
• Zerion Disables Web App After $100K Internal Wallet Breach (cryptorank.io)
• Zerion: Detected abnormal activity on the platform, temporarily ... (weex.com)
• Zerion - Status (status.zerion.io)
• Zerion (@zerion) on X (x.com)

Explore the topic

• Wallet
• App
• Security