Back Bitget

domain subjected to social engineering attack, control of the cow.fi domain has now been regained.

Bitget • April 16, 2026

Foresight News reports that CoW Swap announced on Twitter that it has regained control of the cow.fi domain and has been operating normally on cow.finance for some time, and is now gradually transitioning back to the original domain. According to the official statement, on April 14, the attacker deceived the DNS registrar by forging documents to obtain control of the cow.fi domain. The attacker deployed a highly realistic phishing website, implementing the attack in two stages: first, tricking users into signing malicious transactions through a wallet drainer, and then stealing mnemonic phrases and passwords via fake wallet pop-ups. This attack targeted the domain registrar and did not involve CoW Swap’s own infrastructure or any private key leaks. Affected users are advised to use tools such as Revoke.cash to revoke all approvals and consider transferring funds to a new wallet.

Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.

The open interest for S&P 500 index futures contracts on Trade.xyz has increased by over 40% in the past two days, making it the largest open interest product.

PIMCO: Investment opportunities arise in European bonds after sell-off

Ripple partners with Kyobo Life Insurance in Korea to pilot government bond settlement tokenization

The Solana Institute-backed super PAC spends $8 million in Ohio race to oppose Sherrod Brown

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CoW Swap Regains Control of cow.fi Domain After Social Engineering Attack On April 14, 2026, CoW Swap's cow.fi domain was compromised through a social engineering attack that deceived the DNS registrar with forged documents. The attacker created a phishing website that operated in two phases: first, tricking users into signing malicious transactions via a wallet drainer, and second, stealing mnemonic phrases and passwords through fake wallet pop-ups. This attack did not exploit CoW Swap's infrastructure or involve any private key leaks. Affected users are advised to use tools like Revoke.cash to revoke all approvals and consider transferring their funds to new wallets. As of April 16, CoW Swap has regained control of the cow.fi domain and is transitioning back from cow.finance. The incident highlights the vulnerabilities in domain registration processes and the importance of user vigilance against phishing attempts. 6 sources 58

Extracted Entities

domain subjected to social engineering attack, control of the cow.fi domain has now been regained.

The full story

Extracted Entities

Attack Types (1)

Companies (1)

Countries (1)

Domains (2)

MITRE ATT&CK (2)