Curve Finance’s principal front end, [curve.fi](http://curve.fi) , fell victim to a DNS hijacking yesterday, in which users were prompted to approve a malicious contract. Approximately $575k was stolen from users who approved, with proceeds being sent to CEXs and Tornado Cash. It seems OFAC’s sanctions don’t scare those who are already breaking the law… what a surprise.