Tools Crypto Exploit Tracker exploit-0057
Exploit record
CoW Swap
- Loss
- $1M
- Attack vector
- Phishing
- Chain
- Ethereum
- Sector
- DEX
What happened
On 14 April 2026 CoW Swap's cow.fi domain was hijacked and users were redirected to a wallet-draining phishing site, with reported losses of about $1.2 million.
Attackers used forged documents and weaknesses in the .fi domain registration process to seize the domain at around 14:54 UTC, serving a fake front end that drained connected wallets. CoW DAO confirmed its smart contracts, backend and APIs were not compromised, paused the protocol as a precaution, identified the breach within 19 minutes and restored the domain within 26 hours, later adding RegistryLock protection.
One record from the Crypto Exploit Tracker, maintained by the Security Desk. Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 15 September 2026