defirisk.co
rubric v1.7.0

Protocol-impersonator domain registered (typosquat)

Aerodrome Finance's assessment for RD-F-161 — scored red on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Cat 11: protocol-impersonator domain registered (typosquat). Active typosquat drainer documented: 'Claim Aerodrome Rewards' scam promoted through mistyped/typosquatted URLs targeting Aerodrome users. Documented by pcrisk.com as of assessment date. Registration date of specific domains not confirmed (domain monitoring feed not deployed), but the drainer is actively documented and live. Threshold: typosquat domain registered in last 90 days AND active — evidence supports 'active' condition; temporal condition unconfirmable but highly probable given active documentation. Scored red based on confirmed active impersonation threat.

Sources #

  • URL
    Claim Aerodrome Rewards Scam — PCRiskPCRisk: 'Claim Aerodrome Rewards Scam — Removal and recovery steps' — active drainer promoted through typosquatting; removal guide published confirming active threatretrieved 2026-05-04
  • URL
    Aerodrome Finance Attack Warning — CoinDeskCoinDesk 2025-11-22: Aerodrome warned users to avoid main domain after frontend breach — brand impersonation context; multiple attack surfaces documentedretrieved 2026-05-04

Methodology #

Determine whether a typosquat of the official protocol domain has been registered in the last 90 days.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol aerodrome factor RD-F-161 score red collected_at 2026-05-04 19:56:03