Ethereum Updates: DeFi's Vulnerability Exposed—Centralized DNS Attacks Lead to User Asset Loss

Bitget App

Trade smarter

Bitget

News

Markets

Ethereum Updates: DeFi's Vulnerability Exposed—Centralized DNS Attacks Lead to User Asset Loss

Bitget-RWA2025/11/23 16:36

By:Bitget-RWA

- Aerodrome and Velodrome DEXs suffered DNS hijack attacks, redirecting users to phishing sites via compromised registrars like Box Domains. - Attackers exploited centralized domain vulnerabilities to steal ETH, NFTs, and stablecoins, mirroring a 2023 incident that caused $100K+ losses. - Platforms urged users to bypass main domains and use decentralized mirrors, highlighting ongoing risks in DeFi's off-chain infrastructure. - Experts recommend DNSSEC and ENS adoption as solutions, while Dromos Labs plans

Aerodrome, the leading decentralized exchange (DEX) operating on

Ethereum

Layer 2 network Base, along with Velodrome, its equivalent on

Optimism

, experienced a DNS hijacking incident early Saturday, which redirected users to fraudulent websites. This breach closely resembled an event from late 2023, highlighting ongoing weaknesses in centralized domain management. Both exchanges assured users that their smart contracts were unaffected, but cautioned against accessing their main domains, such as Aerodrome.finance and Velodrome.finance, recommending instead to

use decentralized mirrors

The attackers exploited flaws in domain registrar systems, enabling them to modify DNS settings and reroute visitors to malicious front-ends. Victims encountered misleading prompts, tricking them into approving transactions that drained their assets, including NFTs, ETH, and stablecoins

according to Bitget

. Aerodrome indicated that the attackers targeted Box Domains, its registrar, while Velodrome initially reached out to My.box for assistance before withdrawing the statement

according to CryptoRank

. Despite the compromise, the phishing sites were taken offline by Saturday afternoon, suggesting that mitigation steps were underway

according to FinanceFeeds

Investors were reminded that although on-chain contracts generally remain secure during such incidents, compromised front-ends present serious phishing dangers. "Always confirm contract interactions directly on-chain if the website is down,"

advised security experts

. The 2023 attack on these platforms reportedly resulted in losses exceeding $100,000, with the breach traced back to registrar Porkbun

according to FinanceFeeds

. The recurrence of these attacks underscores the persistent risks associated with centralized DNS, which continues to be a major vulnerability for DeFi projects

according to Bitget

Aerodrome and Velodrome are crucial to their respective blockchain ecosystems. Aerodrome is the primary source of liquidity on Base, while Velodrome serves as a central hub for Optimism’s Superchain. The simultaneous targeting of both DEXs highlights the interconnected risks across ecosystems, as many protocols depend on them for routing and incentives

according to FinanceFeeds

. The incident comes at a sensitive time for Dromos Labs, the team behind Velodrome, which recently revealed plans to merge Aerodrome and Velodrome into a single platform called Aero. This unified protocol, scheduled for launch in Q2 2026, is intended to pool liquidity across both Base and Optimism

according to FinanceFeeds

This event has reignited discussions about the importance of off-chain security in DeFi. While smart contracts are often robust, administrative controls and domain registrars remain susceptible to attacks. Experts suggest implementing measures such as DNSSEC, multi-factor authentication for domain accounts, and decentralizing front-ends using IPFS or

Ethereum Name Service

(ENS)

according to FinanceFeeds

Ethereum Updates: DeFi's Vulnerability Exposed—Centralized DNS Attacks Lead to User Asset Loss image 0

Aerodrome and Velodrome have also recommended that users revoke recent token permissions and utilize services like Revoke.cash to reduce exposure

according to Bitget

Industry responses include the introduction of solutions such as Infoblox’s DNS-based threat protection, which works with AWS to proactively block harmful domains

according to GlobalNewswire

. These approaches may help address the broader challenge of DNS security, as attackers increasingly exploit these weaknesses to circumvent conventional defenses

according to GlobalNewswire

For now, users are encouraged to access decentralized mirror sites or interact directly with verified contract addresses. This incident is a stark reminder that, even as DeFi protocols bolster on-chain protections, off-chain vulnerabilities continue to pose significant threats to user assets

according to FinanceFeeds

Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.

PoolX: Earn new token airdrops

Lock your assets and earn 10%+ APR

Lock now!

- ICP's token price surged 30% in 2025 due to transformative upgrades in on-chain governance and Layer 1 scalability. - Fission and Knot upgrades enabled 1,200+ TPS with reverse gas model, outperforming Ethereum's scalability limitations. - Active Liquid Democracy governance and Neuron Fund attracted 2,155+ developers, boosting TVL by 22.5% in one day. - Price gains correlate with DeFi adoption, institutional staking, and cross-chain integrations via Chain Fusion technology.

Bitget-RWA•2025/11/23 17:10

Solana News Update: Major Investors Place Significant Bets on Solana ETFs Amid 30% Price Drop, Challenging the Strength of $130 Support

- Solana's ETFs (BSOL/FSOL) drew $476M in 17 days despite SOL's 30% price drop to $130, signaling institutional confidence. - $130 support level shows buying pressure with RSI rising to 50, though $160 EMA remains a key reentry target for bulls. - On-chain growth (18% active address rise) and projects like GeeFi reinforce Solana's infrastructure, but $140 resistance remains fragile. - Mixed futures signals (5% higher OI, positive funding rates) highlight uncertainty, with $120 as next potential downside ri

Bitget-RWA•2025/11/23 16:56

Solana News Update: Major Investors Place Significant Bets on Solana ETFs Amid 30% Price Drop, Challenging the Strength of $130 Support

PEPE Balances on a Fine Line: Key Support at $0.0547 and Resistance at $0.05504 Under Scrutiny

- PEPE cryptocurrency stabilized above $0.0547 support, trading within a narrow range as of mid-November 2025. - Technical indicators show neutral sentiment with RSI at 50.62 and MACD near zero, per xt.com and BitGet analyses. - Whale movements and exchange flows drive volatility, while long-term forecasts range from 140,000% to 28.6 million% gains by 2030-2050. - Market depends on meme culture relevance, institutional adoption, and broader crypto trends like Ethereum's price and ETF regulations.

Bitget-RWA•2025/11/23 16:56

Bitcoin Updates Today: Kiyosaki Turns Bitcoin Profits into Ongoing Income, Living by His Own Advice

- Robert Kiyosaki sold $2.25M in Bitcoin at $90,000/coin, reinvesting in surgical centers and billboards for tax-free income. - He aims for $27,500 monthly cash flow by 2026, aligning with his passive-income strategy while maintaining Bitcoin's $250K/2026 price target. - Bitcoin's 33% drop from $126K peaks reflects broader market slump driven by Fed rate uncertainty and offshore trading pressures. - Kiyosaki advocates gold/silver and warns of systemic risks, contrasting with analysts who see intact fundame

Bitget-RWA•2025/11/23 16:56