Loading article…
CoW DAO approved CIP-86 to compensate users up to 100% for $1.2 million lost in an April 14 domain hijack. Claims are due May 14, with payouts by May 31.
CoW DAO has approved governance proposal CIP-86, establishing a discretionary fund to reimburse users who lost an estimated $1.2 million in a phishing attack on April 14 [2, 3]. Affected users must submit claims by May 14 to receive compensation, with payouts expected to begin May 21 and conclude by May 31 [1, 2].
The incident occurred when attackers used social engineering against CoW Swap's domain registrar, Gandi SAS, to briefly control the cow.fi domain for about 4.5 hours [1, 2]. During this window, visitors were redirected to a phishing website that mimicked the official interface, tricking them into signing malicious transactions that drained assets like USDC from their wallets [2, 3]. CoW DAO emphasized that the CoW Protocol's smart contracts and backend infrastructure were not compromised; the vulnerability was entirely at the domain registrar layer [1, 3]. Security firm Blockaid issued an early warning, flagging cow.fi as malicious [2].
CIP-86 authorizes "ex gratia" payments from CoW DAO's Legal Defense Reserve, meaning the compensation is a goodwill gesture and not an admission of legal liability [2, 3]. The proposal allows for up to 100% reimbursement for verified losses [3]. To claim, users must email [email protected] with the subject "Discretionary Grant Claim for CoW.Fi Domain Hijack Incident," including their affected wallet address, asset information, transaction hashes, and full name [1, 2]. CoW DAO has hired an external firm for identity verification, and eligible claimants will receive a secure KYC link after initial review [2].
This approach follows a pattern seen in other DeFi projects that have compensated users for frontend incidents even when core protocols remained secure [2]. The decision highlights how DAOs may prioritize community trust and reputation by using treasury funds for voluntary compensation, despite the added friction of KYC requirements for claimants [2]. The process for verifying and reimbursing claims is set to conclude by May 31 [2, 3].
Coverage is mostly measured — 143 of 147 reports stay neutral.
Every Monday — the token unlocks, Fed dates & catalysts set to move crypto and markets this week. So you’re never blindsided.
Free · 3-min read · one-click unsubscribe
AI-assisted synthesis by the TrendWatcher Editorial Desk · sourced from 4 outlets · Jun 16, 2026 · How we report
A Dao Crypto organization, or decentralized autonomous organization, is a system governed by smart contracts and token holders rather than a centralized entity. As of 2024, these organizations use blockchain technology to manage assets, such as the stablecoin DAI, or to coordinate community governance and decision-making.
MakerDAO manages the value of the DAI stablecoin by utilizing smart contracts to control the supply through an overcollateralized loan process. By adjusting collateralization ratios and interest rates, the organization maintains the stablecoin's peg to the US dollar.
A Dao Crypto organization can remove leadership or staff through community voting processes, as seen when the Ethereum Name Service community voted to remove a director of operations. These organizations function through decentralized governance where token holders or community delegates make decisions regarding the entity's personnel and operations.