What happened
BlockSec Research stated that 72% out of 100 audited DeFi domains lack CAA records, and 47% fail DNSSEC validation.
Why it matters
Domain or frontend hijacking can affect user access to Web3 services, making DNS settings a matter of operational security rather than just technical details.
BlockSec Research reported an audit of DNS configurations for 100 leading DeFi domains. According to the research firm, 72% of them lack a CAA record, and 47% fail DNSSEC validation.
The company links these gaps to the risk of frontend hijacking, through which users interact with Web3 services. The available description does not specify the particular domains, the timeframe of the audit, or specific attack scenarios.
The practical context for DeFi teams is to verify the presence of CAA records and the correctness of DNSSEC for their domains. However, the source material is presented only as a brief summary by BlockSec Research, so its findings lack independent confirmation in the provided package.
Confirmed facts
- BlockSec Research reported scanning DNS settings for 100 leading DeFi domains.
- According to BlockSec Research, 72% of the audited domains do not have a CAA record.
- According to BlockSec Research, 47% of the audited domains fail DNSSEC validation.
- BlockSec Research highlighted gaps that could be exploited for frontend hijacking.
- The source was published on 9 September 2026.
Context
The material is based on a single primary publication by BlockSec Research; the package contains no independent confirmation or the full text of the study.
What remains unknown
- What is the scanning methodology and the verification date for the 100 domains?
- Which specific domains were included in the sample?
- What practical consequences did the identified settings have?
- Have independent researchers confirmed the results?
Editorial context
Confidence: medium
If the figures are confirmed, DeFi teams will need to pay greater attention to securing domain infrastructure alongside smart contracts. The next observable signal will be the publication of the methodology, a list of verified domains, or independent verification. Substantial uncertainty remains due to the absence of the full study text and a second source.