Leaderboard
742All-time rank
Curve DEX
Aug 9, 2022
$575K
Lost
$575K
Recovered
$575K
Net loss
$0
Full100% recovered
On August 9, 2022, Curve Finance's DNS provider (iwantmyname) was hijacked, redirecting users to a malicious frontend that injected token approval transactions. Curve's smart contracts remained secure; the team quickly identified and reverted the issue.
- Target
- DeFi
- Classification
- Frontend & Infrastructure
- Technique
- DNS Hijack
- Attribution
- Unknown
- Chains
Ethereum
Event timeline
- Aug 9, 2022Exploit executed — $575K drained via dns hijack
- Attributed to Unknown
- Recovery status Full 100%