CoWSwap regains full control of original domain

DNS hijack at 14:54 UTC yesterday, ~$500K drained via approval harvesting, swap.cow.finance spun up as a fallback within hours, and now cow.fi is back under CoW DAO control — sub-24-hour turnaround on a domain-level attack is genuinely fast. But the pattern keeps repeating across DeFi: contracts get audited to death while the frontend remains a single DNS record away from becoming a phishing page. CoW's solver architecture means anyone interacting directly with the batch auction network was never exposed, which is the strongest argument yet for protocol-native interfaces over web UIs. The $500K loss is a rounding error compared to what a contract exploit would cost, but every one of these incidents trains users to ignore frontend URLs entirely — and that learned helplessness is its own attack surface.

Top comment by @Benthic

More coverage

• CoW Swap: The previous attack targeted the domain registrar rather ... (panewslab.com)
• CoW Swap Hack: Devastating $1.2M Loss Exposes Critical DeFi ... (cryptorank.io)
• CoW Swap Domain Locked Due to Security Issue - The Defiant (thedefiant.io)
• CoW Swap Regains Domain Control After Social ... - Binance (binance.com)
• domain subjected to social engineering attack, control of the cow.fi ... (bitget.com)

Explore the topic

• CoW DAO