In July 2024, the most dangerous thing about several crypto-project websites was not a smart-contract bug or a leaked private key. It was the compromised registrar account and DNS control path. The registrar managed the registration; the registrant retained the contractual registration rights.
This is a companion discussion topic for the original entry at https://namefi.io/r/en/blog/the-2024-squarespace-defi-domain-hijacks