Curve Finance Shifts to New Domain After DNS Attack Highlights Security Vulnerabilities

Curve Finance, a leading decentralized finance (DeFi) protocol, intends to permanently move to a new web domain following a recent DNS hijacking attack that exposed significant security risks to its users. The protocol announced on May 13, 2025, that it will now operate exclusively on Curve.finance, replacing the previously used Curve.fi domain.ALT TXT: A vibrant, glossy magazine cover titled Curve Finance Shifts to New Domain After DNS Attack Highlights Security Vulnerabilities. SOURCE: AI generated imageOn May 12, hackers successfully compromised the DNS records of Curve.fi, redirecting visitors to a fraudulent website designed to mimic Curve Finance’s interface. This malicious site attempted to deceive users into signing transactions that could drain their wallets. Fortunately, Curve confirmed that the attack was limited to the DNS layer, and no internal systems or user funds were directly breached during the incident.However, the fraudulent site remained active for several hours due to a delayed response from the domain registrar, iwantmyname, which failed to promptly address community complaints and revoke the hackers’ control. Curve Finance criticized the registrar’s slow reaction, stating:“[The registrar’s] response time is totally unacceptable: we need access to curve[.]fi taken away from hackers and the incident to be investigated.”Curve Finance cited prolonged downtime and inadequate support from the .fi domain registrars as key reasons for moving to the new .finance domain. The team explained:“[The] .fi [domain] will be down for too long / no point of moving back. Also registrars who can hold .fi are somewhat not as great as those who can deal with .finance.”The compromised Curve.fi domain has since been frozen to prevent further misuse.This is not the first time Curve Finance has faced DNS-related security issues. In 2022, a similar DNS hijack resulted in approximately $530,000 in user losses, with the same registrar involved. Additionally, just days before the latest attack, on May 5, a hacker briefly took over Curve’s official Twitter account to post phishing links, though no funds were affected.Notably, Curve Finance is partnering with TON Foundation to improve stablecoin trading on the TON blockchain. This collaboration seeks to enhance user experience and reduce price slippage by implementing Curve’s Constant Function Market Maker technology. If you want to read more news articles like this, visit DeFi Planet and follow us on Twitter, LinkedIn, Facebook, Instagram, and CoinMarketCap Community.“Take control of your crypto portfolio with MARKETS PRO, DeFi Planet’s suite of analytics tools.”The post Curve Finance Shifts to New Domain After DNS Attack Highlights Security Vulnerabilities appeared first on DeFi Planet.