Ethereum News Update: Major DEX Compromised as Centralized DNS Vulnerability Threatens DeFi Security

Bitget App

Trade smarter

Bitget

News

Markets

Ethereum News Update: Major DEX Compromised as Centralized DNS Vulnerability Threatens DeFi Security

Bitget-RWA2025/11/22 19:08

By:Bitget-RWA

- Aerodrome and Velodrome DEXs suffered DNS hijacking attacks, redirecting users to phishing sites via centralized domain vulnerabilities. - Attackers exploited compromised domains to trick users into signing malicious transactions, mirroring a 2023 incident that caused $300,000+ losses. - Platforms urged users to revoke token approvals and use ENS mirrors, emphasizing secure smart contracts but highlighting DeFi's front-end risks. - The breach occurred days after Aerodrome's planned merger with Velodrome,

Aerodrome Finance, recognized as the top decentralized exchange (DEX) on

Ethereum

Layer 2 network Base, along with Velodrome, its equivalent on

Optimism

experienced a front-end security breach

early Saturday. This led to urgent advisories for users to avoid the official websites and instead use decentralized mirror sites. The breach,

believed to be caused by a DNS hijacking

, enabled attackers to redirect visitors to phishing pages crafted to deceive users into approving harmful transactions. Both exchanges stressed that their core smart contracts were unaffected, but users were urged to revoke any recent token permissions and steer clear of suspicious domains

as outlined in the report

This incident is reminiscent of a similar attack in late 2023, when the front-ends of Aerodrome and Velodrome were also compromised,

leading to user losses exceeding $300,000

. The most recent compromise happened just after Aerodrome

revealed its intention to merge with Velodrome

under a unified "Aero" ecosystem, aiming to pool liquidity across both Base and Optimism. Despite the incident, the value of the AERO token

remained steady

, trading near $0.67, marking a 2% rise in the last 24 hours.

Ethereum News Update: Major DEX Compromised as Centralized DNS Vulnerability Threatens DeFi Security image 0

The DNS hijack took advantage of weaknesses in centralized domain registrars, sending users to fake sites that closely resembled the DEXs' original interfaces.

Impacted users described misleading pop-ups

, such as innocent-looking signature requests followed by aggressive prompts to approve NFTs, ETH, and stablecoins. The Aerodrome team

identified the breach

after noticing suspicious domain activity and quickly disabled access to affected domains like aerodrome.finance and aerodrome.box,

advising users to utilize ENS-based mirrors

such as aero.drome.eth.limo. Velodrome issued similar guidance, urging users to avoid centralized domains and use decentralized options

as stated in the report

This event underscores persistent threats in decentralized finance (DeFi), where vulnerabilities in front-end infrastructure—unlike on-chain smart contract exploits—can be targeted without breaching the protocol itself.

Both Aerodrome and Velodrome reassured

that their liquidity pools and protocol reserves were unaffected. Nevertheless, the breach highlights the necessity for stronger domain security, especially for projects dependent on centralized DNS providers.

Aerodrome’s team is currently working with its domain provider, My.box, to investigate the incident and

has called for immediate support

to address the problem. The DEX also

suggested using tools like Revoke.cash

so users can remove recent token permissions and reduce the risk from any lingering malicious access.

The coordinated nature of this attack raises alarms about broader weaknesses in domain management, suggesting that other DeFi platforms could face similar risks. As the sector continues to move toward decentralization, dependence on centralized DNS remains a major concern.

Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.

PoolX: Earn new token airdrops

Lock your assets and earn 10%+ APR

Lock now!

- Bitcoin fell below $90,000 amid ECB President Lagarde's persistent "worth nothing" stance, erasing 2025 gains and causing 13% average investor losses. - Lagarde reiterated Bitcoin's "highly speculative" nature despite its 2025 record high, contrasting with global digital asset adoption and ECB's digital euro project. - Market analysts debate a potential rebound near $87,000, while ECB warns of stablecoin risks amid 48% 2025 volume surge and U.S. regulatory shifts. - ECB's digital euro initiative aims to

Bitget-RWA•2025/11/22 20:18

Bitcoin Updates: Bitcoin's Sharp Decline Highlights ECB Doubts Amid Changing Cryptocurrency Environment

Rising Incidents of Air Rage Spark Appeals for Polite Travel, While Detractors Highlight Deeper Systemic Issues

- U.S. Transportation Secretary Sean Duffy launched a campaign urging travelers to restore civility in air travel, citing a 400% rise in in-flight outbursts since 2019. - The initiative promotes courteous behavior, such as assisting passengers and showing gratitude to crew, amid FAA data showing 13,800 unruly incidents since 2021. - Critics blame airlines for cramped seating and poor service, arguing civility efforts should address systemic issues like overcrowding and pricing rather than passenger attire.

Bitget-RWA•2025/11/22 20:02

Rising Incidents of Air Rage Spark Appeals for Polite Travel, While Detractors Highlight Deeper Systemic Issues

Bitcoin Updates: Investors Flee Bitcoin, Boosting Gold and Income-Producing Tokens

- Bitcoin faces record outflows and institutional skepticism as ETFs lose $3B in November, with BlackRock’s trust seeing its largest single-day redemption. - Gold surges 55% annually, outpacing Bitcoin’s flat performance, while Harvard reallocates $218M to gold ETFs and Harvard’s endowment shifts toward physical assets. - XRP Tundra attracts Bitcoin investors with yield-generating features like 20% APY Cryo Vaults, offering diversification through dual-token governance and Solana integration. - Market fear

Bitget-RWA•2025/11/22 20:02

Bitcoin Updates: Investors Flee Bitcoin, Boosting Gold and Income-Producing Tokens

PENGU's Price Decline: An Analysis of Small-Cap Cryptocurrency Fluctuations During Shifting Market Sentiment

- PENGU's 2025 price plunge reflects systemic risks in small-cap crypto, driven by Bitcoin/Ethereum collapses and liquidity crises. - DAT sector's 60%+ declines (e.g., MSTR) and $19B October crypto liquidation highlight cascading market pressures impacting PENGU. - Low-volume tokens like PENGU face amplified volatility due to lack of fundamentals, regulatory clarity, or institutional support. - Broader flight from speculative crypto assets underscores small-cap tokens' role as macroeconomic anxiety proxies

Bitget-RWA•2025/11/22 20:00