CoW Swap suffered a $1.2 million loss after attackers used social engineering to hijack its domain and redirect users to a phishing site. The core protocol was not compromised, but the incident exposed major off-chain security risks in DeFi.
CoW Swap said a phishing attack exploiting domain management weaknesses caused about $1.2 million in user losses. The core protocol and smart contracts were not breached, but the incident highlights growing security risks around DeFi frontends and domain infrastructure.
A new Bitcoin Improvement Proposal, BIP-361, suggests forcing users to migrate funds to quantum-resistant addresses or risk having legacy coins frozen. The idea has ignited debate over security, ownership and Bitcoin’s core principles.
Bitcoin’s proposed BIP-361 would push holders to migrate funds to quantum-resistant addresses or risk having legacy coins frozen. The debate highlights rising concern over quantum threats and the tension between network security and Bitcoin’s core self-custody principle.
Bitcoin’s BIP-361 proposes a post-quantum migration path that could freeze coins left on legacy signature schemes. The idea has reignited debate over whether Bitcoin’s core principle of private-key-based ownership can coexist with protocol-level defenses against future quantum threats.
Aave and CoW Protocol released separate post-mortems on the March 12 swap that turned $50.4 million in USDT into about $36,000 of AAVE. Aave blamed illiquid market conditions, while CoW highlighted legacy gas limits, solver failures and a possible mempool leak.
ENS gateway eth.limo said its domain hijack was caused by a social engineering attack against easyDNS. The attacker changed domain settings after abusing account recovery, but DNSSEC prevented broader malicious redirection. No user impact is known so far.
Kelp DAO suffers $292M exploit via LayerZero cross-chain message spoofing, draining 116,500 rsETH (~18% supply). Attacker uses funds as collateral on Aave, SparkLend to borrow $280M+ wETH, causing bad debt. Aave, Lido, Ethena pause affected markets. AAVE token drops 10%.
