CoW Swap’s decentralized autonomous organization warned users to avoid the platform after an unknown actor hijacked its domain. In a post on X on Tuesday, the project said a DNS hijacking affected its site, prompting the team to pause backend services and APIs while a frontend exploit remained active at swap.cow.fi.
The CoW team said it was actively working to resolve the issue and asked users to “refrain from using swap dot cow dot fi until we confirm that it is safe to use.” Domain and DNS attacks are a recurring risk in crypto because compromised domains can serve phishing pages that put funds at risk; protocols such as Balancer and Curve Finance have reported similar incidents in the past.
The market reacted: the COW token fell more than 3%, dropping to $0.2159 from $0.2229 after news of the hijack.
Separately, blockchain security firm Hacken reported that Web3 projects lost $482 million to hacks and scams in Q1 2026, documenting 44 incidents in the quarter with phishing and social engineering making up the bulk of losses.
This article follows Cointelegraph’s Editorial Policy; readers are encouraged to verify information independently.
