CoW DAO reported that its domain registrar was compromised in a social engineering attack on April 14, leading to a brief control of the official domain for approximately 4.5 hours. According to ChainCatcher, during this period, users were redirected to a phishing site, resulting in the signing of malicious transactions. The CoW Protocol itself was not breached, but some user assets were affected during this time.
In response, the CoW DAO community has approved governance proposal CIP-86, establishing a discretionary compensation fund to reimburse affected users. Eligible users must submit claims by May 14, including wallet addresses, asset information, transaction hashes, and names. Applications should be sent to
[email protected] with the email subject "Discretionary Grant Claim for."