TLDR
Aerodrome Finance (AERO) on Base and Velodrome Finance (VELO) on ethereum/">Optimism reported DNS hijacks on Saturday, 22 Nov, warning users about compromised web domains. Aerodrome confirmed a DNS hijack in an X update, and coverage noted Velodrome reported a similar front end compromise that day (Aerodrome post, media report mentioning both).
- Aerodrome Finance: centralized domains hijacked, ENS mirrors flagged as safe while contracts remained secure (Aerodrome update).
- Velodrome Finance: sister protocol also reported a Saturday front end compromise under investigation (report mentioning both).
Deep Dive
1. Aerodrome Details
Aerodrome Finance warned on Saturday that its centralized domains were compromised via a DNS hijack and asked users to avoid them while the team investigated. The project said contracts were unaffected and pointed to ENS mirrors as safe alternatives in its update on X, listing two verified domains (Aerodrome update). Media coverage the same day recapped the hijack, the ENS mirror guidance, and that smart contracts appeared secure (incident recap).
This was a front end attack. Even if contracts are safe, spoofed sites can present malicious transactions.
2. Velodrome Context
Reports the same weekend said Velodrome Finance, Aerodromes sister protocol on Optimism, also reported a front end compromise and was investigating. Coverage grouped the incidents and noted the shared development lineage, underscoring a likely DNS provider vector rather than a contract exploit (media report mentioning both).
Similar symptoms across related DEXs suggest a domain hijack at the provider level, not a protocol code breach.
Conclusion
On Saturday, 22 Nov, Aerodrome Finance on Base and Velodrome Finance on Optimism reported DNS hijacks affecting their web front ends. Reports and the project update stressed that core smart contracts appeared secure, while users should treat centralized domains as untrusted until cleared (see the Aerodrome X update and the media report above).
CoinsKid.Com