
- Curve Finance’s DNS hijack affects user interactions.
- Front-end security concerns emerge again.
- CRV token sees a ~7% value drop.

Curve Finance issued a warning on May 12, 2025, notifying users of a DNS hijack on their website, urging them to avoid interaction with the compromised front-end.
The incident highlighted ongoing vulnerabilities in DeFi’s DNS security, impacting user trust and causing a notable decrease in the Curve token value.
Curve Finance, a leader in stablecoin swaps, experienced a DNS hijack, affecting their front-end security. Users were advised not to engage with the site as it redirected to a malicious platform. This was not the first attack; a similar issue occurred in August 2022.
Website points to the wrong IP… While all smart contracts are safe, the domain name points to a malicious site which can drain your wallet! — Binance
In response to the latest event, Curve Finance issued warnings through X (Twitter) to mitigate user risk. The on-chain security firm Blockaid also expressed concerns about potential attacks, advocating for transaction avoidance.
The CRV token dropped, reflecting market unease following the hijack. User wallets were vulnerable if they interacted with the compromised site, affecting trust in the platform. The event influenced perceptions of DNS security in DeFi.
Potential regulatory and technological outcomes may follow as DNS hijacks expose critical vulnerabilities. Historical incidents like this prompt calls for improved security protocols and enhanced registrar safeguards, potentially affecting DNS practices industry-wide.
Be the first to leave a comment