“The attack did not compromise the underlying smart contracts, but users are advised to avoid the compromised domains and instead use decentralized ENS domains.”, — write: www.coindesk.com
The incident appears to be a DNS hijacking of Aerodrome’s centralized domains, which allowed attackers to reroute users to lookalike phishing sites designed to trick them into signing malicious wallet transactions to separate them from their funds. Users are advised to instead rely on Aerodrome’s decentralized domains. Aerodrome has asked My.box, the domain provider, to contact them about a potential exploit of their systems.
These attacks do not compromise the underlying smart contracts, which manage user funds and protocol logic on-chain. At the time of writing, it’s unconfirmed whether the attack has led to any losses or how many users have been affected. Liquidity pools and protocol treasuries remain intact, according to Aerodrome.
Aerodrome’s team has been posting real-time updates on X, urging users not to access the compromised domains, aerodrome.finance and aerodrome.box, and instead use decentralized ENS mirrors like aero.drome.eth.limo. To reduce risk, the team recommends revoking recent token approvals using tools like Revoke.cash and avoiding signing any transactions from unverified domains.
New attackAerodrome has experienced similar front-end attacks before, including two in late 2023 that resulted in approximately $300,000 in user losses.
This latest attack comes just days after Aerodrome announced a merger with Velodrome, consolidating liquidity across Base and Optimism under the new “Aero” ecosystem. Despite the disruption, the AERO token price remained stable at around $0.67, up 2% over the last 24 hours.
The investigation is ongoing.
- As of October 2025, GoPlus has generated $4.7M in total revenue across its product lines. The GoPlus App is the primary revenue driver, contributing $2.5M (approx. 53%), followed by the SafeToken Protocol at $1.7M.
- GoPlus Intelligence’s Token Security API averaged 717 million monthly calls year-to-date in 2025, with a peak of nearly 1 billion calls in February 2025. Total blockchain-level requests, including transaction simulations, averaged an additional 350 million per month.
- Since its January 2025 launch, the $GPS token has registered over $5B in total spot volume and $10B in derivatives volume in 2025. Monthly spot volume peaked in March 2025 at over $1.1B, while derivatives volume peaked the same month at over $4B.
View Full Report
The protocol will instead focus on “liquidity infrastructure and deals” such as its recent $1 billion investment into PayPal’s PYUSD.
- DeFi protocol Spark has paused plans to launch a mobile app, citing a focus on its core competence in DeFi-native crypto and a competitive market.
- The protocol will instead focus on “liquidity infrastructure and deals” such as its recent $1B investment into PayPal’s PYUSD, targeting institutional use cases.
- The decision comes as another DeFi giant, Aave, has announced the launch of a retail yield app, with Spark’s CEO expressing well-wishes but also highlighting the competitive nature of the market.
Read full story