The centralized domains for both Aerodrome and Velodrome were hijacked via a NameSilo registrar compromise. Attackers bypassed multisig controls, removed DNSSEC, and redirected domains to malicious pages. Users were silently redirected to phishing interfaces with malicious signature flows and unlimited approval prompts, resulting in $700K in losses. The underlying smart contracts remained uncompromised.