The Curve DNS may be hijacked, avoid interacting for the time being!

Curve Finance, a major decentralized finance protocol best known for its stablecoin-focused AMM, issued an urgent warning that its curve.fi DNS may be hijacked, advising users to avoid interacting with the website and not to sign any transactions until further notice. The incident involves the domain name system (DNS) for Curve’s primary .fi domain being redirected to a malicious front end that mimics the official interface and can prompt users to connect wallets and approve transactions designed to drain funds. Security researchers and third‑party monitors reported that the domain was resolving to an attacker-controlled IP and serving a phishing interface, while Curve emphasized that its smart contracts remain unaffected and that the issue is confined to the DNS and front-end layer. This DNS hijack comes shortly after a separate compromise of Curve’s official X account, making it the second security incident in a short span and underscoring the ongoing risk of Web2 infrastructure (registrars, DNS) to DeFi protocols that otherwise rely on secure on-chain contracts. Curve has said it has contacted the domain registrar and begun recovery procedures, while also reiterating that on-chain protocol operations are intact and user funds in the contracts are safe as long as users avoid interacting with the compromised domain. The disruption has knock‑on effects for other DeFi projects integrated with Curve’s front end or data feeds, and it renews industry discussion about registrar‑level attacks, the need for stronger DNS security, and potential migration to more decentralized front-end and naming solutions.

✨ AI-generated background, compiled from web sources — not editorial content.

More coverage

• Curve Finance battles DNS hijack days after X account breach (crypto.news)
• Curve Finance warns users of DNS hijack in second cyber attack ... (cryptorank.io)
• What is DNS hijacking? How it took down Curve Finance's website (tradingview.com)
• Curve Domain Incident - Curve News (news.curve.finance)
• Curve Finance warns users of DNS hijack in second cyber attack ... (binance.com)

Explore the topic

• Curve