Curve Finance, a prominent decentralized finance (DeFi) protocol, has been targeted in a recent hacking incident, according to reports on their website. The team issued an urgent warning on social media, urging users to refrain from using the platform due to a potential DNS hijack.
The breach has had repercussions on multiple DeFi projects like Convex Finance and Resupply, leading to service disruptions as they rely on Curve’s data feeds. While these platforms themselves are secure, their functionality is impacted until Curve's domain is restored.
DNS hijacking, a cyberattack technique that manipulates the Domain Name System to misdirect users to malicious websites, is believed to be the cause. This incident serves as a reminder of the security vulnerabilities present in DeFi frontends, which are susceptible to traditional threats like DNS hijacks unlike the decentralized smart contracts.
Entities associated with Curve, such as Convex, have cautioned users against engaging with dApps connected to Curve until the situation is resolved. Curve Finance is collaborating with affected partners to address the issue, and updates are expected as the investigation progresses.
This event underscores the importance of enhancing frontend security for DeFi protocols to prevent similar incidents in the future. Investigations are ongoing, and further details will be shared as they become available.