Damn! General Kim’s army of hackers has launched an all-out assault on the crypto world?! They’re doing this every day, and it’s clear they’re invincible online. Our only hope is that the U.S. quickly sends troops into the real world to take them out.
WLFI adviser shares security alert: Kintsu, StonkBrokers and others suspected of front-end attacks; connecting a wallet could lead to asset theft
World Liberty adviser Ogle posted on X that he had received an alert from security firm Blockaid, warning users not to visit the affected websites or connect their wallets for the time being. According to the publicly available alert, Blockaid said it had detected an active front-end attack linked to the StepDrainer toolkit, affecting Kintsu, Flap and StonkBrokers. Malicious scripts were injected into the affected sites, and users who click “Connect Wallet” may be redirected to a malicious page designed to steal their assets. Blockaid is currently investigating and gathering more information, and will provide further updates as they become available.
Kintsu confirms DNS hijacking, urges users to revoke approvals and transfer assets
Kintsu said in an official post that its website is currently displaying a malicious site after its domain registrar suffered a DNS hijacking attack. It urged users not to visit the site, connect their wallets or sign any transactions. Users who connected a wallet or signed a transaction since 00:00 UTC on October 31 should immediately revoke the relevant approvals through the Revoke platform and transfer their assets. Kintsu will issue another notice once it has confirmed the website is secure again.
Blockaid alert indicates StepDrainer attack is expanding; users urged to exercise caution when connecting wallets
Pons founder Ozzy posted on X that, according to an alert from Blockaid, the StepDrainer attack previously targeting projects such as Kintsu and Flap is expanding. It now affects StonkFun, Pickle Finance, Echelon, Origami, Fluxbeam, Stakepoint, SupSwap, Longbow, SHPRD and ApeX DeFi. Blockaid urged users not to visit the websites listed above or the previously identified affected DApps for the time being, and not to connect their wallets. $SOL
WLFI adviser shares security alert: Kintsu, StonkBrokers and others suspected of front-end attacks; connecting a wallet could lead to asset theft
World Liberty adviser Ogle posted on X that he had received an alert from security firm Blockaid, warning users not to visit the affected websites or connect their wallets for the time being. According to the publicly available alert, Blockaid said it had detected an active front-end attack linked to the StepDrainer toolkit, affecting Kintsu, Flap and StonkBrokers. Malicious scripts were injected into the affected sites, and users who click “Connect Wallet” may be redirected to a malicious page designed to steal their assets. Blockaid is currently investigating and gathering more information, and will provide further updates as they become available.
Kintsu confirms DNS hijacking, urges users to revoke approvals and transfer assets
Kintsu said in an official post that its website is currently displaying a malicious site after its domain registrar suffered a DNS hijacking attack. It urged users not to visit the site, connect their wallets or sign any transactions. Users who connected a wallet or signed a transaction since 00:00 UTC on October 31 should immediately revoke the relevant approvals through the Revoke platform and transfer their assets. Kintsu will issue another notice once it has confirmed the website is secure again.
Blockaid alert indicates StepDrainer attack is expanding; users urged to exercise caution when connecting wallets
Pons founder Ozzy posted on X that, according to an alert from Blockaid, the StepDrainer attack previously targeting projects such as Kintsu and Flap is expanding. It now affects StonkFun, Pickle Finance, Echelon, Origami, Fluxbeam, Stakepoint, SupSwap, Longbow, SHPRD and ApeX DeFi. Blockaid urged users not to visit the websites listed above or the previously identified affected DApps for the time being, and not to connect their wallets. $SOL
