Is domain security really the Achilles' heel of Web3?

CoW Swap releases post-incident report, determining supply chain domain hijacking: attackers used social engineering against the .fi registry Traficom and registrar Gandi SAS to point DNS to attacker-controlled Cloudflare servers, providing phishing sites to users. The core system was unaffected; the attack was limited to the domain registration chain. Discovered in 19 minutes, switched to cow.finance in 3.5 hours, domain restored and RegistryLock enabled on April 15. Preliminary losses are approximately $1.2 million.