Gate News message, April 24 — CoW Swap has deployed two solver infrastructure upgrades to enhance bidding mechanisms and optimize execution processes, according to CoW DAO. The first upgrade, "hidden bids until deadline," prevents solvers from seeing each other's quotes during auctions, requiring b

CoW Swap regained control of its cow.fi domain after a social engineering attack that occurred on April 14. The attackers used forged documents to manipulate the DNS registrar and deploy a phishing site. Users affected by the incident are advised to revoke transaction approvals and transfer funds.

CoW Swap suspended its protocol after DNS hijacking redirected users to a fraudulent site, resulting in over $1 million in crypto theft. The incident led to precautionary actions and user warnings, while security measures were implemented.

Blockaid has identified a frontend attack on CoW Swap, marking its domain as malicious. Users are advised to cease interactions, revoke wallet authorizations, and await further updates from the CoW Swap team.

An Ethereum user mistakenly exchanged 50 million USD in stablecoins for only 37,000 USD worth of Aave tokens in a token swap, sparking widespread discussion due to insufficient liquidity and extreme slippage. The incident exposed flaws in DeFi trading mechanisms, prompting Aave and CoW Swap to propose improvement measures. Responsibility disputes continue, with experts calling for optimized system design to better protect users.

On March 16th, Aave and CoW Swap each released reports regarding the "high slippage trading loss of $50 million" incident. Aave attributed the problem to insufficient market liquidity, while CoW Swap pointed out outdated gas limits and transactions not being submitted on-chain. The two parties held opposing views, and neither mentioned the approximately $44 million MEV bot-related situation.

CoW DAO responded to the incident where a whale lost $50.39 million while swapping aEthAAVE, stating that the decentralized trading platform was unable to complete the transaction. The team emphasized the importance of user autonomy and choice. They are researching how to balance security with user self-sovereignty and have committed to reimbursing related fees.

On-chain monitoring platform Lookonchain has discovered multiple recent Ethereum transfer records associated with vitalik.eth. Data shows that within three days, he sold a total of 2,961.5 ETH in batches, which was approximately $6.6 million at the time. The transactions were completed through the CoW protocol, executed in small, multiple transactions, and the on-chain settlement process was verified by Arkham. No hidden routing or mixer operation traces were found. From a historical perspective, this is not a temporary action. Vitalik has previously publicly stated that he would gradually transfer some ETH for long-term plans. Recently, he also transferred 16,384 ETH, worth over $43 million, some of which was used for his Kanro organization to support biotech research, open-source security, and public welfare projects. His past operations have always been carried out in a slow, planned manner, with no signs of abrupt liquidation.

Between 22:52 and 22:57, UXLINK Exploiter received a total of 140.54 WBTC transfers from CoW Protocol, with a total value of approximately $127 million. The specific transfer times and amounts are 31.38, 24.09, 24.06, 24.09, and 36.43 WBTC respectively.