Front-end takeover of a top-50 DEX via compromised CDN bucket

Attackers replaced bundle.js to inject a wallet drainer for ~3.5 hours. Affected users were re-routed to a malicious permit2 signer. IOCs published.