WuBlockchain
Blockaid identified 12 crypto project websites linked to frontend attacks, including sites serving the Step Drainer wallet-draining tool. Flap and Kintsu confirmed DNS hijacks affecting their websites and warned users not to visit, connect wallets, or sign transactions.
Why it matters
A DNS hijack can send visitors to a malicious version of a legitimate website. The threat is to users who connect wallets or sign approvals on those sites, not simply to people who previously used the authentic websites. Flap founder Cedric said users who had connected to Flap’s legitimate site were unaffected.
Market impact
Blockaid initially flagged Flap and Kintsu, then identified 10 additional sites, including pickle[.]finance, origami[.]finance, and fluxbeam[.]xyz. The investigation is ongoing.
Kintsu advised users who connected wallets or signed anything since approximately 00:00 UTC on October 31 to revoke approvals and move funds. Both projects said they would announce when their websites are safe to use.
Frequently asked questions
-
How many crypto project websites did Blockaid link to frontend attacks?
Blockaid identified 12 websites linked to frontend attacks, including sites serving the Step Drainer wallet-draining tool.
-
Which projects confirmed DNS hijacks on their websites?
Flap and Kintsu confirmed DNS hijacks and warned users not to visit their websites, connect wallets, or sign transactions.
-
What should Kintsu users do if they connected or signed on the site?
Kintsu advised users who connected wallets or signed anything since approximately 00:00 UTC on October 31 to revoke approvals and move funds.
-
Were users who previously connected to Flap's legitimate website affected?
Flap founder Cedric said users who had connected to the legitimate website were unaffected. The risk concerns users who interacted with the malicious site.
-
Which other websites did Blockaid identify?
Among the 10 additional websites Blockaid identified were pickle[.]finance, origami[.]finance, and fluxbeam[.]xyz.
CryptoSlate
TheBlock
CoinDesk
WatcherGuru
CoinTelegraph
Lookonchain