{"id":52339,"date":"2025-05-13T12:39:13","date_gmt":"2025-05-13T12:39:13","guid":{"rendered":"https:\/\/crowdfundjunction.com\/blog\/curve-dao-crv-price-drops-as-curve-finance-battles-dns-attack\/"},"modified":"2025-05-13T12:39:13","modified_gmt":"2025-05-13T12:39:13","slug":"curve-dao-crv-price-drops-as-curve-finance-battles-dns-attack","status":"publish","type":"post","link":"https:\/\/crowdfundjunction.com\/blog\/curve-dao-crv-price-drops-as-curve-finance-battles-dns-attack\/","title":{"rendered":"Curve DAO (CRV) price drops as Curve Finance battles DNS attack"},"content":{"rendered":"<p><b>(Originally posted on : CoinJournal: Latest Crypto News, Altcoin News and Cryptocurrency Comparison )<\/b><br \/>\n<\/p>\n<div data-site=\"CoinJournal\">\n<div class=\"-mt-16  mb-8  lg:-mt-20  rounded-md  shadow-md\">\n<div class=\"relative  z-10  post-article-image  rounded  overflow-hidden\" data-site=\"CoinJournal\">\n<picture><source srcset=\"https:\/\/coinjournal.net\/wp-content\/uploads\/imagecache\/2025\/05\/Curve-DAO-CRV-price-drops-as-Curve-Finance-battles-DNS-attack-smartcrop-750x375.webp\" type=\"image\/webp\" media=\"(min-width: 750px)\"\/><source srcset=\"https:\/\/coinjournal.net\/wp-content\/uploads\/imagecache\/2025\/05\/Curve-DAO-CRV-price-drops-as-Curve-Finance-battles-DNS-attack-smartcrop-363x181.webp\" type=\"image\/webp\"\/><source srcset=\"https:\/\/coinjournal.net\/wp-content\/uploads\/imagecache\/2025\/05\/Curve-DAO-CRV-price-drops-as-Curve-Finance-battles-DNS-attack-smartcrop-750x375.png\" type=\"image\/jpeg\" media=\"(min-width: 750px)\"\/><source srcset=\"https:\/\/coinjournal.net\/wp-content\/uploads\/imagecache\/2025\/05\/Curve-DAO-CRV-price-drops-as-Curve-Finance-battles-DNS-attack-smartcrop-363x181.png\" type=\"image\/jpeg\"\/>\n<\/picture>                            <\/div>\n<\/p><\/div>\n<ul>\n<li>Curve Finance DNS hijack redirected users to a malicious clone site.<\/li>\n<li>CRV price has slid about 7.7% as investors panicked and dumped tokens.<\/li>\n<li>Curve Finance plans migration from DNS to ENS to enhance front-end security.<\/li>\n<\/ul>\n<p>Late on May 12, Curve Finance warned in an X post that its \u201ccurve.fi\u201d domain might be hijacked, and users were urged to avoid the site altogether.<\/p>\n<blockquote class=\"twitter-tweet\" data-width=\"500\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">Seems like <a href=\"https:\/\/t.co\/vOeMYOTq0l\">https:\/\/t.co\/vOeMYOTq0l<\/a> DNS might be hijacked. Don&#8217;t interact!<\/p>\n<p>\u2014 Curve Finance (@CurveFinance) <a href=\"https:\/\/twitter.com\/CurveFinance\/status\/1922040492121829678?ref_src=twsrc%5Etfw\">May 12, 2025<\/a><\/p>\n<\/blockquote>\n<p>According to <a href=\"https:\/\/x.com\/CurveFinance\/status\/1922199907269501130\">an update issued by Curve Finance on X<\/a>, the attackers rerouted the official Curve website\u2019s DNS entries to a front-end clone designed to drain wallets through a deceptively simple drainer link embedded in the page.<\/p>\n<p>While the platform\u2019s smart contracts remain unaffected and secure, the compromised domain now points to an IP address controlled by malicious actors.<\/p>\n<p>Wallet providers such as Phantom swiftly responded by blocking the \u201ccurve.fi\u201d address and displaying prominent warnings to users attempting to connect.<\/p>\n<p>Following the attack, Curve Finance has opened a full investigation, engaging security partners and its domain registrar to recover control and restore the genuine site.<\/p>\n<h2>Curve DAO (CRV) token price dips<\/h2>\n<p>In the wake of the DNS attack, CRV\u2019s price has slipped to around $0.7231 on the <a href=\"https:\/\/coinmarketcap.com\/currencies\/curve-dao-token\/\">CoinMarketCap live chart<\/a>, marking a 7.7% decline over the past 24 hours as panic spread among investors.<\/p>\n<p>As the price drops, trading volume has surged to over $188 million as holders raced to exit positions amidst the unfolding security crisis.<\/p>\n<p>In addition, the token\u2019s market capitalisation has fallen to roughly $973.1 million, underscoring the tangible impact of off-chain vulnerabilities on on-chain assets.<\/p>\n<p>Although Bitcoin\u2019s own retreat from $105,000 to $102,000 contributed to some downward pressure, analysts agree that the DNS incident served as the primary catalyst for the Curve DAO (CRV) sell-off.<\/p>\n<p>Technical indicators show CRV revisiting price ranges last seen prior to the recent China-US trade deal, reflecting heightened volatility and investor concern.<\/p>\n<h2>It\u2019s the second time Curve Finance is facing a DNS attack<\/h2>\n<p>The May 13 attack marks Curve Finance\u2019s second front-end DNS breach, following a <a href=\"https:\/\/coinjournal.net\/news\/curve-hacker-returns-part-of-the-stolen-assets\/\">similar incident<\/a> in July 2023 when around $61 million was siphoned before containment.<\/p>\n<p>On that occasion, Binance froze more than $450,000 after the culprit attempted to launder funds through its exchange, while Fixed Float recovered about 112 ETH.<\/p>\n<p>Curve subsequently changed DNS providers and advised users to revoke all approvals tied to the compromised domain, but front-end risk remained unaddressed.<\/p>\n<p>The protocol\u2019s social media channels have also been targeted, with its X account briefly hijacked on May 5 to post phishing links before being reclaimed on May 6.<\/p>\n<blockquote class=\"twitter-tweet\" data-width=\"500\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">Yesterday, the official <a href=\"https:\/\/twitter.com\/CurveFinance?ref_src=twsrc%5Etfw\">@CurveFinance<\/a> X account was compromised. As you already know, access has been fully restored.<\/p>\n<p>To clarify: the incident was limited strictly to the X account. No other Curve accounts were affected. No security issues were found on our side, no user funds\u2026 <a href=\"https:\/\/t.co\/8bci75uZGr\">https:\/\/t.co\/8bci75uZGr<\/a><\/p>\n<p>\u2014 Curve Finance (@CurveFinance) <a href=\"https:\/\/twitter.com\/CurveFinance\/status\/1919692884011331711?ref_src=twsrc%5Etfw\">May 6, 2025<\/a><\/p>\n<\/blockquote>\n<p>While Curve Finance has reiterated that no user funds were impacted, the cumulative sequence of breaches has eroded user trust in the platform\u2019s external infrastructure.<\/p>\n<p>Users have voiced frustration at Curve\u2019s inability to secure its public-facing layers despite robust on-chain protocols, with one commenter noting that \u201csecure contracts don\u2019t matter much when the domain itself is the weak link.\u201d<\/p>\n<p>Security experts emphasise that front-end vulnerabilities pose existential risks for DeFi, as wallet connections and transaction approvals are mediated through user interfaces.<\/p>\n<p>Industry peers are monitoring Curve\u2019s remediation efforts closely, understanding that a successful ENS migration could set a new standard for protocol security.<\/p>\n<p>Meanwhile, investors are watching CRV\u2019s performance for signs of recovery or further downside, with broader market conditions also playing a critical role.<\/p>\n<h2>Curve Finance to move from DNS to ENS<\/h2>\n<p>In response to the latest attack, Curve Finance confirmed plans to ditch traditional DNS in favour of the Ethereum Name Service (ENS) for its human-readable addresses.<\/p>\n<p>Unlike DNS, ENS utilises smart contracts on Ethereum\u2019s blockchain to manage naming, eliminating reliance on centralised registrars and hosting providers.<\/p>\n<p>By transitioning to ENS, Curve aims to bolster front-end security and minimise the attack surface that allowed malicious actors to hijack its domain.<\/p>\n<p>The switch to \u201ccurve.finance\u201d under ENS governance represents a structural shift toward decentralisation beyond simply smart contracts.<\/p>\n<p>As Curve Finance diligently works to restore its official website and complete its ENS transition, CRV\u2019s price trajectory remains uncertain in the near term.<\/p>\n<p>For now, CRV investors must navigate heightened volatility and evolving security measures as Curve Finance battles back from another front-end exploit.<\/p>\n<div class=\"post-meta\">\n<hr class=\"mb-6\"\/>\n<h6 class=\"text-3xl  mb-4  text-green-300\">Share this article<\/h6>\n<hr class=\"mb-6\"\/>\n<h6 class=\"text-3xl  mb-4  text-green-300\">Categories<\/h6>\n<hr class=\"mb-6\"\/>\n<h6 class=\"text-3xl  mb-4  text-green-300\">Tags<\/h6>\n<\/p><\/div>\n<\/p><\/div>\n<p><script async src=\"\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><br \/>\n<br \/><a href=\"https:\/\/coinjournal.net\/news\/curve-dao-crv-price-drops-as-curve-finance-battles-dns-attack\/\">Source link <\/a><br \/>\n<br \/><\/p>\n","protected":false},"excerpt":{"rendered":"<p>(Originally posted on : CoinJournal: Latest Crypto News, Altcoin News and Cryptocurrency Comparison ) Curve Finance DNS hijack redirected users to a malicious clone site. CRV price has slid about 7.7% as investors panicked and dumped tokens. Curve Finance plans migration from DNS to ENS to enhance front-end security. Late on May 12, Curve Finance [&hellip;]<\/p>\n","protected":false},"author":7,"featured_media":52340,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0},"categories":[35],"tags":[],"_links":{"self":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/posts\/52339"}],"collection":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/comments?post=52339"}],"version-history":[{"count":0,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/posts\/52339\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/media\/52340"}],"wp:attachment":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/media?parent=52339"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/categories?post=52339"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/tags?post=52339"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}