A prominent decentralized trading platform, CoW Swap, has suspended its services temporarily due to a domain name system (DNS) hijacking incident. The incident, which occurred at 14:54 UTC, has prompted the team to warn users against interacting with the platform's interface until further notice. Although the protocol's underlying infrastructure, including its backend and APIs, was not directly compromised, it has been paused as a precautionary measure while the team works to resolve the issue.
DNS hijacking is a type of attack that allows hackers to redirect users from a legitimate domain to a malicious site, often to steal cryptocurrency or sensitive information. This attack vector has become a significant vulnerability in the DeFi space, where users typically rely on web-based interfaces to access secure smart contracts.
CoW Swap operates as a decentralized exchange aggregator, sourcing liquidity from multiple venues and utilizing a 'Coincidence of Wants' mechanism to match trades directly between users or batch them for more efficient execution. The platform's design aims to minimize slippage and limit exposure to maximal extractable value (MEV), a practice where bots reorder transactions to extract profit at users' expense. CoW Swap is governed by CoW DAO, a decentralized autonomous organization that emerged from the Gnosis ecosystem, and has positioned itself as a user-protective alternative in DeFi trading, emphasizing high-quality execution and fairer trading outcomes. The team has assured users that they are actively working to resolve the situation and have advised against using the swap.cow.fi website until it is confirmed to be safe.