CowSwap Breach Triggers Alert as Blockaid Flags Critical Flaw

• CowSwap breach triggers warnings as users halt access and revoke permissions.
• Blockaid flags interface flaw as DNS hijack redirects users to a malicious website version.
• COW drops sharply and then shows slight stabilization as investigation continues further.

CowSwap came under pressure after reporting a frontend security breach that stirred fresh concern across the DeFi market. Suspicious activity appeared as trading interest picked up. Security researchers and the platform moved quickly to warn users and limit further exposure.

Blockchain security firm Blockaid said it had identified a critical vulnerability affecting the CowSwap website interface. The firm urged users to revoke wallet permissions immediately. It also advised them not to connect wallets to the platform until further notice.

CowSwap Frontend Breach Leads to DNS Hijack Warning

The warning centered on the frontend layer rather than the protocol’s core infrastructure. A breach of this kind could change what users see and approve on screen. That creates a risk of unintended permissions or malicious transaction approvals.

CowSwap acknowledged the issue soon after the alert was published. The team said it was dealing with a frontend problem and asked users to avoid the platform for the time being. 

The team later said the incident resulted from a DNS hijacking event that began at 14:54 UTC. This type of attack could redirect users from a legitimate site to a malicious version without clear signs of tampering.

According to CowSwap, the protocol’s backend systems and APIs were not affected. Still, both were paused temporarily as a precaution. 

Users were told not to visit swap.cow.fi until the issue is fully resolved. CowSwap also advised users to revoke any token approvals made after the reported time. The team pointed to tools such as revoke.cash for that process.

COW Stabilizes as User Concerns Persist

The market reacted soon after the disclosure. CowSwap’s native token, COW, fell to $0.2137 in the initial move. The drop reflected immediate concern as traders responded to the security incident.

The token later showed signs of short-term stabilization. As of press time, COW is trading at $0.2211, up 3.94% over the past 24 hours. Even so, sentiment remains cautious as the security incident continues to unfold.

Source: TradingView

CowSwap serves as the main trading interface for CoW Protocol. It uses batch auctions and competing solvers to route trades across multiple on-chain liquidity sources. 

The protocol supports activity on Ethereum, Base, Polygon, Arbitrum, Gnosis, Avalanche, BNB Chain, Linea, Plasma, and Ink. Its broad network coverage has made it a widely used platform in decentralized finance.

Although the team said core systems were not affected, concern among users remains high. Previous DeFi incidents have often taken time to recover from and have weighed on platform confidence. More details are expected as the investigation moves forward.

Related: Bitcoin Depot Hack May Be Bigger Than Reported, Says ZachXBT