Both Cream Finance and PancakeSwap had their GoDaddy-hosted DNS records hijacked simultaneously. Attackers redirected users to phishing sites requesting seed phrases and private keys. Both teams regained DNS control within hours on March 15, 2021 (by 17:30 UTC for PancakeSwap).