dYdX posted on X that the domain name registrar of dydx.exchange (formerly Squarespace) confirmed that dYdX Trading's Squarespace account was accessed by unauthorized personnel on July 23 because these people carried out social engineering attacks on Squarespace customer support. In the approximately 2 hours when the dydx.exchange domain name was hijacked, 2 users lost a total of approximately $31,000.
dYdX Trading has contacted these users and will ensure that they are fully compensated. After re-ensuring the security of the domain name, dYdX has added additional control measures to prevent such incidents from happening again, including migrating the domain name to Cloudflare.