

CoW Swap's DAO has urged users to avoid its platform due to a DNS hijacking incident. The organization is currently addressing the security breach and has paused its backend and APIs.
Decentralized exchange aggregator CoW Swap is calling on users to refrain from using its website after an unknown party hijacked its domain.
In a Tuesday X post, the decentralized autonomous organization (DAO) behind CoW Swap said its website had experienced a “DNS [Domain Name System] hijacking,” leading to a pause of its backend and APIs. The frontend exploit, through the website http://swap.cow.fi, was ongoing at the time of publication.
“We are now actively working to resolve the situation,” said CoW Swap. “Please continue to refrain from using swap dot cow dot fi until we confirm that it is safe to use.”

Source: CoW Swap
DNS attacks like the one CoW Swap reported are not uncommon among crypto and blockchain companies where user funds are at risk from phishing attempts. Decentralized exchange Balancer reported a domain attack in 2023, while Curve Finance said it has experienced multiple DNS hijackings.
Related: Firestorm erupts in Aave governance forum over CoW Swap fees
The price of the CoW Protocol’s COW token dropped more than 3% amid news of the domain hijacking, to $0.2159 from $0.2229.
Blockchain security company Hacken reported on Tuesday that Web3 projects lost $482 million to hacks and scams in the first quarter of 2026. According to Hacken, there were 44 incidents over Q1 2026, most of which were phishing and social engineering attacks.
CoW Swap's website experienced a DNS hijacking, prompting the DAO to advise users to stay off the platform.
Users are advised to refrain from using the CoW Swap website until the DAO confirms it is safe.
CoW Swap is actively working to resolve the DNS hijacking situation and has paused its backend and APIs.
See every story in Crypto — including breaking news and analysis.