Velodrome

An attacker used social engineering to compromise the domain registrar account for both Velodrome and Aerodrome, bypassing 2FA protections. Nameserver records were altered to redirect legitimate traffic to malicious protocol clones.

Users were tricked into approving transactions on fake contracts, losing funds to attacker wallets. ChainSec and ZachXBT estimated losses at over $100K-$250K across both protocols.