Skip to content
DEX DNS Hijacking Attack Compromises User Security in DeFi

DEX DNS Hijacking Attack Compromises User Security in DeFi

First seen 23 Nov 2025, 12:26 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •March 12, 2026 at 13:27 UTC

A decentralized exchange (DEX) faced a DNS hijacking attack, redirecting users to phishing sites through vulnerabilities in centralized domain registrars. This incident mirrors a similar attack in late 2023, where Aerodrome and Velodrome were compromised, resulting in over $300,000 in losses. Users are advised to revoke token approvals and consider using ENS mirrors to enhance security.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 218d ago How this analysis works

More articles in this cluster (5)

Following this threat?

Track Aerodrome in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed