Too many web2 security issues still affect web3. Recently, DNS takeovers have been in the spotlight with velodrome and aerodrome incidents. This repository contains a Solidity smart contract designed to securely store and verify MD5 hashes of websites. In the DeFi space, DNS takeovers pose a significant threat, often leading to users interacting with malicious webpages and potentially losing funds. By storing MD5 hashes of webpages on chain, we create a provable and immutable record that helps when verifying if a webpage is the same as the one deployed by the protocol owner.
For Example:
During the Velodrome incident, the MD5 = 0597d6b768c447f87d43ac8bff96bdaf.
When velodrome regained control, the MD5 = ab479bd6a07b57895e9a252b3f90cc8f.
git clone https://github.com/0xkoda/verifi-web.git
cd verifi-web
forge test
Feel free to contribute.
This is a POC and should not be used in production.