CoW DAO Approves Full Compensation for cow.fi Domain Hijack Victims
Security
Neutral

CoW DAO Approves Full Compensation for cow.fi Domain Hijack Victims

CoW DAO passed proposal CIP-86 to offer discretionary grants covering up to 100% of losses from April's cow.fi domain hijack. Affected users must file claims by May 14, with payouts targeted for May 31.

May 11, 2026, 07:02 PM1 min read

Key Takeaways

  • 1## Compensation Framework Approved CoW DAO voted to ratify CIP-86, which establishes a discretionary grant program for victims of the April cow.
  • 2fi domain hijack.
  • 3The proposal authorizes grants of up to 100% compensation, covering the full extent of losses incurred during the incident.
  • 4The DAO did not specify a total compensation pool size in publicly available materials, leaving final payout amounts subject to claims review and DAO discretion.
  • 5## Claims and Payout Timeline Affected users must submit detailed claims by May 14.

Compensation Framework Approved

CoW DAO voted to ratify CIP-86, which establishes a discretionary grant program for victims of the April cow.fi domain hijack. The proposal authorizes grants of up to 100% compensation, covering the full extent of losses incurred during the incident. The DAO did not specify a total compensation pool size in publicly available materials, leaving final payout amounts subject to claims review and DAO discretion.

Claims and Payout Timeline

Affected users must submit detailed claims by May 14. CoW DAO has targeted May 31 as the payout date, pending verification of claims. The specific claims process, documentation requirements, and dispute resolution mechanism were not detailed in the announcement.

Context of the April Incident

The cow.fi domain was hijacked in April, redirecting users to a malicious site. The incident exposed users to phishing or unauthorized transactions. The exact dollar amount of losses and number of affected wallets have not been disclosed in the available announcement materials.

Why It Matters

For Traders

CoW token holders should monitor governance discussions around the compensation pool size, which will indicate expected dilution or treasury draw.

For Investors

A full-compensation payout signals the DAO prioritizes user trust recovery post-incident, though repeated domain-hijack vulnerabilities raise operational security questions.

For Builders

Protocol teams should audit their own domain registration and DNS security posture; this incident underscores the fragility of frontend infrastructure in DeFi.

Latest News