Curve Finance tweeted that the Curve.fi domain name server has not yet been updated (requires full 24 hours, and that cannot be accelerated). But hacker's site is already down. Curve reminds users to use curve.exchange or verify that IP is 76.76.21.21.