Curve Finance warns its DNS has been hijacked again

Onchain security firm Blockaid speculates it might be a front end attack, and says not to sign transactions and avoid interactions with Cuve until the issue is resolved.

Decentralized finance (DeFi) protocol Curve Finance has warned that a hacker has again hijacked its domain name system (DNS), sending users to a malicious website.  

In the second attack on its infrastructure in a week, the “curve.fi DNS might be hijacked. Don’t interact!” the team said in a May 12 warning to X.

In a follow-up post to a user asking whether it was a hack or a hijack, the Curve Team said the website “Points to the wrong IP” when users try to visit. A DNS works like a directory that translates domain names into IP addresses. 

Read more