A prominent decentralized trading platform, CoW Swap, has suspended its services after detecting a DNS hijacking incident affecting its website. The security breach, which occurred at 14:54 UTC, has prompted the team to warn users against interacting with the platform until further notice. Although the protocol's underlying infrastructure remains intact, it has been paused as a precautionary measure while the team works to resolve the issue.
DNS hijacking is a significant security risk in DeFi, allowing attackers to redirect users to malicious sites and potentially drain crypto wallets or steal sensitive information. CoW Swap, a decentralized exchange aggregator, sources liquidity from multiple venues and utilizes a 'Coincidence of Wants' mechanism to facilitate direct trades between users or batch them for efficient execution. The platform is designed to minimize slippage and limit exposure to maximal extractable value (MEV), a practice where bots reorder transactions to profit at users' expense. As a user-protective alternative in DeFi trading, CoW Swap emphasizes execution quality and fair trading outcomes.
The team has urged users to avoid using the platform until it is deemed safe, stating, 'We are now actively working to resolve the situation. Please continue to refrain from using swap dot cow dot fi until we confirm that it is safe to use.'