A prominent decentralized trading platform, CoW Swap, has temporarily suspended its services due to a domain name system hijacking incident. The platform's team detected the breach and immediately warned users to avoid interacting with its interface until the issue is resolved.
Although the protocol's underlying infrastructure was not directly compromised, it was paused as a precautionary measure. The attack, which occurred at 14:54 UTC, highlights the ongoing security risks associated with the front-end layer of DeFi platforms. DNS hijacking is a common attack vector that allows hackers to redirect users to a fake website, often to steal cryptocurrency or sensitive information. CoW Swap, a decentralized exchange aggregator, sources liquidity from multiple venues and uses a 'Coincidence of Wants' mechanism to match trades directly between users.
The platform is designed to reduce slippage and limit exposure to maximal extractable value (MEV), a practice where bots reorder transactions to extract profit at users' expense. CoW Swap is governed by CoW DAO, a decentralized autonomous organization, and has positioned itself as a user-protective alternative in DeFi trading, emphasizing execution quality and fairer trading outcomes. The team is actively working to resolve the situation and has advised users to refrain from using the platform until it is confirmed to be safe.