# DEX · Drain Watch

2 incidents, 0 live. JSON: https://drains.watch/t/dex.json · RSS: https://drains.watch/t/dex/feed.xml

- [CoW Swap domain hijacked via registrar social engineering; cloned site drains users through approvals](https://drains.watch/i/cow-swap-dns-hijack-apr-2026) (closed, Critical, Contained, since Apr 14, 2026)
- [Aerodrome and Velodrome front-ends hijacked via DNS, cloned sites serve Eleven Drainer](https://drains.watch/i/aerodrome-velodrome-dns-hijack-nov-2025) (closed, Critical, Contained, since Nov 21, 2025)