Ethereum News Update: Major DEX Compromised as Centralized DNS Vulnerability Threatens DeFi Security

Bitget App

Trade smarter

Bitget

News

Markets

Ethereum News Update: Major DEX Compromised as Centralized DNS Vulnerability Threatens DeFi Security

Bitget-RWA2025/11/22 19:08

By:Bitget-RWA

- Aerodrome and Velodrome DEXs suffered DNS hijacking attacks, redirecting users to phishing sites via centralized domain vulnerabilities. - Attackers exploited compromised domains to trick users into signing malicious transactions, mirroring a 2023 incident that caused $300,000+ losses. - Platforms urged users to revoke token approvals and use ENS mirrors, emphasizing secure smart contracts but highlighting DeFi's front-end risks. - The breach occurred days after Aerodrome's planned merger with Velodrome,

Aerodrome Finance, recognized as the top decentralized exchange (DEX) on

Ethereum

Layer 2 network Base, along with Velodrome, its equivalent on

Optimism

experienced a front-end security breach

early Saturday. This led to urgent advisories for users to avoid the official websites and instead use decentralized mirror sites. The breach,

believed to be caused by a DNS hijacking

, enabled attackers to redirect visitors to phishing pages crafted to deceive users into approving harmful transactions. Both exchanges stressed that their core smart contracts were unaffected, but users were urged to revoke any recent token permissions and steer clear of suspicious domains

as outlined in the report

This incident is reminiscent of a similar attack in late 2023, when the front-ends of Aerodrome and Velodrome were also compromised,

leading to user losses exceeding $300,000

. The most recent compromise happened just after Aerodrome

revealed its intention to merge with Velodrome

under a unified "Aero" ecosystem, aiming to pool liquidity across both Base and Optimism. Despite the incident, the value of the AERO token

remained steady

, trading near $0.67, marking a 2% rise in the last 24 hours.

Ethereum News Update: Major DEX Compromised as Centralized DNS Vulnerability Threatens DeFi Security image 0

The DNS hijack took advantage of weaknesses in centralized domain registrars, sending users to fake sites that closely resembled the DEXs' original interfaces.

Impacted users described misleading pop-ups

, such as innocent-looking signature requests followed by aggressive prompts to approve NFTs, ETH, and stablecoins. The Aerodrome team

identified the breach

after noticing suspicious domain activity and quickly disabled access to affected domains like aerodrome.finance and aerodrome.box,

advising users to utilize ENS-based mirrors

such as aero.drome.eth.limo. Velodrome issued similar guidance, urging users to avoid centralized domains and use decentralized options

as stated in the report

This event underscores persistent threats in decentralized finance (DeFi), where vulnerabilities in front-end infrastructure—unlike on-chain smart contract exploits—can be targeted without breaching the protocol itself.

Both Aerodrome and Velodrome reassured

that their liquidity pools and protocol reserves were unaffected. Nevertheless, the breach highlights the necessity for stronger domain security, especially for projects dependent on centralized DNS providers.

Aerodrome’s team is currently working with its domain provider, My.box, to investigate the incident and

has called for immediate support

to address the problem. The DEX also

suggested using tools like Revoke.cash

so users can remove recent token permissions and reduce the risk from any lingering malicious access.

The coordinated nature of this attack raises alarms about broader weaknesses in domain management, suggesting that other DeFi platforms could face similar risks. As the sector continues to move toward decentralization, dependence on centralized DNS remains a major concern.

Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.

PoolX: Earn new token airdrops

Lock your assets and earn 10%+ APR

Lock now!

- Bitcoin whales (1,000–100,000 BTC) sold 112,000 coins over 60 days, but smaller holders and short-term whales offset this with increased accumulation. - Long-term holders (>10 years) remain net buyers, while mid-cycle whales (3–5 years active) dominate selling, reflecting a generational shift in on-chain behavior. - Price dips below $100,000 coincided with rising 1,000+ BTC holder counts—a pattern seen before 2024’s ETF-driven peak—suggesting potential accumulation ahead of a rebound. - Market observers

Bitget-RWA•2025/11/23 18:12

Bitcoin News Today: Bitcoin’s Liquidity Dynamics: Small Investors Surpass Large Holders in Accumulation

Astar 2.0 and the Emerging Era of Scalable Blockchain Solutions: Evaluating the Prospects for Institutional Integration

- Astar 2.0 introduces hybrid blockchain architecture and 300,000 TPS scalability to address institutional adoption barriers. - Strategic partnerships with Sony (Soneium) and Toyota demonstrate real-world applications in entertainment and supply chain digitization. - Institutional confidence grows through $3.16M ASTR investment, 20% QoQ wallet growth, and $2.38M TVL amid market downturn. - Staking 2.0 governance and Chainlink/ChainZero integrations enhance security and cross-chain interoperability for ente

Bitget-RWA•2025/11/23 18:08

Aster DEX Integration and DeFi Sector Placement: Growth Prospects for 2025

- Aster DEX surged to 2M users by Q3 2025 via hybrid AMM-CEX model addressing DeFi liquidity challenges. - Strategic Binance partnership and AI-powered liquidity routing reduced slippage by 40%, boosting institutional adoption. - $10M trading competition and cross-chain capabilities on BNB Chain/Ethereum/Solana drive late-2025 growth momentum. - Faces 63% open interest deficit vs Hyperliquid but outperforms rivals with 19.3% Perp DEX market share and institutional-grade features. - Temporarily delisted fro

Bitget-RWA•2025/11/23 18:08

The Emergence of DASH Aster DEX: Ushering in a New Age for Decentralized Exchanges?

- DASH Aster DEX introduces a hybrid AMM-CEX model with AI-driven liquidity and ZKP-based blockchain to address DeFi scalability and trust issues. - The platform achieved $27.7B daily trading volume and $1.399B TVL in Q3 2025, attracting both retail and institutional investors through cross-chain liquidity aggregation. - Aster Chain's 10,000 TPS capacity and privacy-preserving ZKP technology position it as a high-throughput competitor to Ethereum and Solana while balancing transparency and confidentiality.

Bitget-RWA•2025/11/23 18:08