Curve Finance Hit by Second DNS Hijack Attack This Month

Decentralized finance protocol Curve Finance has suffered its second security breach this month, with hackers hijacking its domain name system (DNS) to redirect users to a malicious website. The platform warned users via social media to avoid interacting with curve.fi until the issue is resolved.

While the smart contracts remain uncompromised, the DNS redirect poses significant risks—users landing on the fraudulent site could have their wallets drained. Curve Finance confirmed its team has activated two-factor authentication and assured the community that backend systems remain secure.

The incident highlights persistent vulnerabilities in DeFi infrastructure, particularly around domain security. This marks the second major exploit targeting Curve Finance in August, following an earlier $24 million hack resulting from vulnerabilities in the Vyper programming language.