On June 23, 2022, Convex Finance's DNS was hijacked after a customer support agent at NameCheap was compromised. The attacker redirected www.convexfinance.com to a phishing site with malicious smart contracts mimicking the original addresses. At least 40 wallet addresses were tricked into approving transactions, though only limited tokens were stolen. Convex reimbursed all affected users from their treasury.

ConvexFinance officially tweeted that a DNS attack caused users to approve malicious contracts on some interactions on the website, and the problem has been fixed.