DeFi Platform Issues Warning After Security Breach Compromises Website

A prominent decentralized trading platform, CoW Swap, has suspended its services temporarily due to a domain name system (DNS) hijacking incident. The platform's team announced the security breach on X, advising users to avoid interacting with the interface until the issue is resolved. Although the protocol's underlying infrastructure, including its backend and APIs, was not directly affected, it has been paused as a precautionary measure. The DNS hijacking incident, which occurred at 14:54 UTC, allows attackers to redirect users to a fake website, potentially draining their crypto wallets or stealing private data. CoW Swap, a decentralized exchange aggregator, sources liquidity from multiple venues and utilizes a 'Coincidence of Wants' mechanism to facilitate direct trades between users or batch them for efficient execution. The platform is designed to minimize slippage and limit exposure to maximal extractable value (MEV), a practice where bots reorder transactions to extract profit at users' expense. CoW Swap is governed by CoW DAO, a decentralized autonomous organization that emphasizes user protection, execution quality, and fair trading outcomes. The team has urged users to refrain from using the platform's website until it is confirmed to be safe. The incident highlights the ongoing security risks associated with DeFi platforms, particularly at the front-end layer.