On October 17, 2024, Ambient Finance frontend domain was hijacked via compromised registrar credentials and redirected to malicious site. Users were tricked into approving token transfers via the fake site. Ambient recovered the domain and reimbursed affected users; smart contracts remained unaffected.