Curve Finance has flagged a Domain Name Service (DNS) attack on its website, just days after bad actors also gained access to the project’s official X account.
Reported late yesterday (May 12), Curve stated that its “curve fi” domain was compromised in an apparent DNS spoofing attack. Taking to X, Curve said, “Seems like http://curve(dot)fi DNS might be hijacked. Don’t interact!”
Seems like https://t.co/vOeMYOTq0l DNS might be hijacked. Don't interact!
— Curve Finance (@CurveFinance) May 12, 2025
Hackers Are Targeting Curve Finance: Team Says User Funds Are Secure
Curve users were advised against interacting with the website until further notice. Curve has also switched to its Curve(dot)finance site, per a tweet from the team. Wallet providers such as Phantom and MetaMask have blocked the curve(dot)fi domain and displayed a warning message for users.
“The incident has not affected the protocol’s infrastructure and is strictly limited to the DNS layer,” Curve’s team announced today (May 13). It was also keen to stress that user funds were secure and the protocol remained operational.
Curve Finance has stated that a full investigation is underway, and they’ve contacted its domain registrar to resolve the matter. According to the latest update on Curve’s X page, Many Web3 security firms and OpSec players are also engaged with the issue.
The incident has reportedly impacted multiple DeFi projects. Convex Finance and Resupply, both of which rely on Curve’s data feeds, reported outages and functionality issues.
All affected teams confirmed their own platforms and user funds remain secure, but dependent services are disrupted until Curve resolves its domain issues.
Convex's website uses data from Curve, and Curve's domain name is currently suffering an attack. As a result, this data is currently unavailable, which negatively impacts most of Convex’s website. Convex's website is safe but will not work correctly until Curve’s domain name… https://t.co/d4npGmMgyn
— Convex Finance (@ConvexFinance) May 12, 2025
EXPLORE: 12 Best AI Crypto Coins to Invest in 2025
Curve Clearly Needs To Up Their Security: Third Incident In Three Years
It’s not the first time Curve Finance has suffered a DNS breach. In 2022, hackers compromised the platform’s DNS and hosted a new IP address to steal funds from decentralized finance users.
Again in 2023, a hacker exploited the Curve backend to steal millions of dollars before returning a portion of the funds. Hilariously, the hacker returned the funds accompanied by an encrypted message that read;
“I saw some ridiculous views, so i want to clarify that I’m refunding you not because you can find me, it’s because I don’t want to ruin your project, maybe it’s a lot of money for a lot of people, but not for me, I’m smarter than all of you. . .”
Finally, just last week, scammers also hacked the Curve X account to promote a wallet-drainer link. However, the team quickly regained control of the account, and no real losses were incurred.
According to DefiLlama, Curve Finance is the 20th largest DeFi application by total value locked (TVL), holding more than $2.35 billion across 22 networks.
BONUS: New Web3 Wallet Best Wallet (BEST) Hits $12m In Presale Funding With $15m The Next Target
Watch our latest video to learn how to buy crypto directly in Best Wallet. 🔥
Buy cryptocurrencies like Ethereum, Bitcoin, and Tether in just a few taps and manage everything from one app.
Download Best Wallet today!
📲 https://t.co/mV4V8pftOK pic.twitter.com/Z00OgFWLcH— Best Wallet (@BestWalletHQ) May 3, 2025
Best Wallet (BEST) quickly becomes the go-to crypto tool as we move deeper into 2025. It is a revolutionary web3 wallet, with innovation and security at the forefront of its product.
Best Wallet is a revolutionary, self-custodial wallet that connects users to more than 200 dApps across Ethereum, Bitcoin, Solana, Base and dozens of other chains. It has a built-in DEX, DeFi staking tools, and a launchpad that allows users to invest in some of the hottest presales at early-bird prices.
All of the above and more have led to $12.1m and counting being poured into the BEST presale to date. The wallet’s native token is still available for just $0.025, and the presale is alleged to be ending soon.
Once BEST goes live, the price will likely spike ahead of Best Wallet’s full-scale launch and its upcoming debit card, the ‘Best Card’. Users can spend their crypto at any Apple or Google Pay terminal worldwide, making Best Wallet a true all-in-one offering.
Grab your BEST tokens before the presale ends and invest in what is being touted as the MetaMask killer.
Download Best Wallet on Google Play or the Apple App Store.
Stay plugged in with the community on X, Telegram, and Discord.
DISCOVER: 20+ Next Crypto to Explode in 2025
Join The 99Bitcoins News Discord Here For The Latest Market Updates
Curve Finance has suffered a DNS attack just a few days after its X account was compromised
- The Curve team have assured its community that user funds are safe but they may permanently switch to a new domain
- Curve have a long history of exploits, after suffering a multi-million dollar hack in 2023 and a smaller incident in 2022
- Best Wallet (BEST) has raised $12.1m in presale funding thus far and is quickly becoming crypto investors go-to Web3 wallet due to its all-in-one offerings
Why you can trust 99Bitcoins
Established in 2013, 99Bitcoin’s team members have been crypto experts since Bitcoin’s Early days.
Weekly Research
100k+Monthly readers
Expert contributors
2000+Crypto Projects Reviewed
