OpenEden official website DNS suspected of being hijacked! The team emphasizes "do not click the link" assets remain secure

RWA Tokenization Platform OpenEden Urgently Issues Warning: Its Official Website and Portal DNS Suspected of Being Compromised. Users are advised to refrain from interacting with related domains to prevent wallet asset loss.
(Background recap: Standard Chartered subsidiary Zodia Custody partners with OpenEden! Providing staking yields for token holders.)
(Additional context: Dissecting the Korean crypto market: Who is leading trading and narratives behind 16 million users?)

OpenEden is a leading global RWA (Real World Asset) tokenization platform. Its tokenized US Treasury bond fund TBILL, managed by Bank of New York Mellon (BNY), is the first on-chain government bond product to receive both S&P “AA+” and Moody’s “A” ratings, ranking first in Asia and Europe markets.

DNS Suspected of Being Compromised, Team Urgently Calls for “Do Not Interact”

OpenEden team states that they have detected that the DNS (Domain Name System) for their website and portal may have been compromised, meaning users entering the OpenEden URL could be redirected to malicious sites. Connecting wallets or signing transactions on fake sites could result in asset theft.

The team strongly urges: Do not visit or operate any OpenEden domains until the issue is resolved.

It appears that the DNS for both https://t.co/T3PjB5U1pL and https://t.co/tHu4ZxlYY0 is compromised. Do NOT interact with them.

All reserve assets remain SAFU and can be verified via https://t.co/0VFOLbwoPk

However, do NOT interact with the domains, as it can cause you to lose…

— OpenEden (@OpenEden_X) February 16, 2026

Reserve Assets Are Safe, Chainlink Can Verify

OpenEden also emphasizes that all on-chain reserve assets remain secure (SAFU) and unaffected. Users can independently verify the underlying assets of USDO stablecoin and TBILL fund through the Chainlink Reserve Proof page.

DNS hijacking is a common attack method in the crypto industry, where hackers infiltrate domain registrars or DNS providers to redirect legitimate website traffic to phishing pages. Previously, protocols like Balancer and Curve Finance have experienced similar attacks. OpenEden team states they are investigating the matter and will release further updates as soon as possible.