3 min read
|
Saved February 14, 2026
|
Copied!
Do you care about this?
Aerodrome and Velodrome, two leading decentralized exchanges, experienced a front-end compromise that redirected users to fraudulent websites. Both platforms confirmed their underlying smart contracts are secure and advised users to access decentralized mirror links while they investigate the DNS hijack. This incident echoes a similar attack from 2023.
If you do, here's more
Aerodrome and Velodrome, two prominent decentralized exchanges (DEXs), faced a front-end compromise on November 22, 2025. Users were advised to access the platforms through decentralized mirror links instead of their main domains. This incident follows a similar attack nearly two years prior, which had also affected both DEXs. In the recent breach, a DNS hijack allowed attackers to redirect users to fraudulent websites while they attempted to reach legitimate domains.
The teams behind Aerodrome and Velodrome announced they were investigating the situation and reassured users about the security of their underlying smart contracts. Reports indicated that the fraudulent site was no longer accessible by Saturday afternoon, hinting at a potential resolution. Interestingly, this attack echoes a previous incident in November 2023, where losses were estimated at over $100,000, attributed to domain registrar Porkbun.
In more recent developments, Dromos Labs, which manages Velodrome, plans to merge the two exchanges into a single platform called "Aero." This new platform is set to launch in the second quarter of 2026 and will consolidate existing tokens into a unified AERO token, which will represent the combined value of both exchanges.
Questions about this article
No questions yet.