Decentralized autonomous organizations (DAOs) govern some of the biggest decentralized finance protocols, including Curve Finance and Aave. Disagreements within a decentralized autonomous organization (DAO) are a sign of a healthy DAO, according to Dr. Michael Egorov, founder of the decentralized finance (DeFi) platform Curve Finance. DAOs are a decentralized organizational structure that relies on smart contracts to automate functions and member voting to govern onchain protocols. Egorov said that both a 2024 governance proposal involving the Curve DAO and the recent dispute involving the Aave DAO illustrate the importance of disagreements to the structure’s vitality. He told Cointelegraph: Read more
Curve Finance attackers used DNS hijacking to exploit its front end, redirecting users to a fake site and draining wallets. On May 12, 2025, at 20:55 UTC, hackers hijacked the “.fi” domain name system (DNS) of Curve Finance after managing to access the registrar. They began sending its users to a malicious website, attempting to drain their wallets. This was the second attack on Curve Finance’s infrastructure in a week. Users were directed to a website that was a non-functional decoy, designed only to trick users into providing wallet signatures. The hack hadn’t breached the protocol’s smart contracts and was limited to the DNS layer. Read more
Onchain security firm Blockaid speculates it might be a front end attack, and says not to sign transactions and avoid interactions with Curve until the issue is resolved. Update May 13, 12:33 am UTC: This article has been updated to include more information from Curve Finance. Decentralized finance (DeFi) protocol Curve Finance has warned that a hacker has again hijacked its domain name system (DNS), sending users to a malicious website. In the second attack on its infrastructure in a week, the “curve.fi DNS might be hijacked. Don’t interact!” the team said in a May 12 warning to X. Read more