Security researchers noted that registrar-level domain hijacking bypasses smart contract security controls and standard URL inspection, creating single-point-of-failure supply chain risks across decentralized finance protocols