CoW Swap announced on Twitter that it has regained control of the cow.fi domain and has been operating normally on cow.finance for some time, and is now gradually transitioning back to the original domain. The official statement revealed that the attacker obtained control of the cow.fi domain on April 14 by deceiving the domain registrar with forged documents; the attacker deployed a highly convincing phishing site in two stages—first inducing users to sign malicious transactions via a wallet stealer, then stealing seed phrases and passwords through a fake wallet popup. This attack targeted the domain registrar, not CoW Swap’s own infrastructure or private keys. Affected users should use tools like Revoke.cash to revoke all authorizations and consider transferring funds to a new wallet.
CoW Swap Regains Domain Control Following Social Engineering Attack
TechFlowShare
Summary
CoW Swap has regained control of the cow.fi domain following a social engineering attack on April 14. The attacker used forged documents to take over the DNS registrar and deployed a phishing site in two phases: first deploying a wallet stealer, then displaying fake wallet pop-ups to steal credentials. The attack did not compromise CoW Swap’s infrastructure or private keys. Users are advised to revoke authorizations via Revoke.cash and transfer funds to new wallets. With altcoins under pressure, the Fear & Greed Index remains a key indicator for traders.
Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information.
Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.