Curve Finance warns of potential DNS hijacking, reminiscent of 2022 attack

Curve Finance, a decentralized finance (DeFi) protocol, reported in a May 12 X post about a potential domain name system (DNS) hijacking, warning users against interaction, according to Cointelegraph. The team clarified that the website points to an incorrect IP, making it vulnerable to redirecting users to a malicious site that could drain their wallets, though they assured users that smart contracts and passwords remain secure. They also confirmed that two-factor authentication (2FA) has been in place for a long time and that they have contacted the registrar. This incident is reminiscent of an August 2022 attack, where exploiters cloned the Curve Finance website, rerouted the DNS and drained user funds into a malicious pool.