Which DEX reported a frontend hijack?

TLDR

Aerodrome Finance and Velodrome reported a frontend hijack caused by a DNS compromise, prompting users to avoid their main domains while investigations proceed news report.

1. Aerodrome warned of a frontend compromise and said smart contracts appear secure official post.
2. Coverage confirmed Aerodromes centralized domains were compromised and suggested ethereum-name-service/">ENS mirrors as safer access media update.
3. Additional reporting highlighted both Aerodrome on Base and Velodrome on Optimism were affected coverage.

Deep Dive

1. Aerodrome Details

Aerodrome Finance (Base) said it is investigating a frontend compromise and asked users not to access any URLs until safety is confirmed, noting smart contracts appear secure official post.

1. Media described a DNS hijack redirecting users to phishing sites and advised use of ENS mirrors while the team works on remediation media update.
2. Reports detailed malicious signature prompts and domain-level compromise, not contract-level exploits coverage.

2. Velodrome Mention

Velodrome (Optimism) was reported alongside Aerodrome as experiencing a front-end compromise via DNS issues, with teams urging users to avoid main domains (see the report above from The Block).

1. The report above notes both DEXs pushed warnings, emphasizing the problem was domain-level and advising alternative access paths.

3. Why It Matters

Front-end hijacks can trick users into signing harmful transactions despite secure contracts. Reports flagged malicious signature requests and unlimited approvals on compromised interfaces coverage.

1. ENS mirrors were cited as safer, decentralized access while centralized domain issues are fixed media update.
2. The incident underscores the need to verify domain authenticity and scrutinize approvals during suspicious periods official post.

Conclusion

Aerodrome Finance and Velodrome reported a DNS-driven frontend hijack, with warnings to avoid primary domains while smart contracts remained secure. The practical takeaway is to verify access paths and approvals during incidents to reduce phishing exposure.