CoW Swap has reported a $1.2 million loss following a domain hijacking attack on April 14, 2026. Attackers compromised the cow.fi domain through a supply chain attack, redirecting users to a phishing site by hijacking DNS resolution. The attackers used social engineering to manipulate the .fi domain registration process, deploying a fake transaction interface to deceive users into signing malicious transactions. The attack did not impact CoW Protocol's on-chain contracts or backend systems, and core services remained secure. The CoW team responded swiftly, identifying the breach within 19 minutes and restoring the domain within 26 hours. Enhanced security measures, including RegistryLock, have been implemented, and third-party audits are underway. Legal actions and user compensation plans are being developed as part of the response strategy.