Flap is back, but when you open it now, you might see a security warning first. Don’t panic—Flap itself asked its partners to put up this warning.
flap.sh was restored this afternoon and is working normally again. The backup domain flap.cool will also remain available. Both URLs take you to the same website and the same product. The warnings will gradually disappear as the partners’ systems are updated.
What exactly happened this morning? Blockaid initially flagged flap.sh, kintsu.xyz, and stonkbrokers.cash as possibly having been targeted in front-end attacks. It later listed 10 websites where StepDrainer had been deployed. According to media reports, at least 12 crypto websites were affected in this wave. Flap’s official statement said flap.sh had been hit by DNS hijacking: the URL was typed correctly, but it opened someone else’s website.
Cedric, the boss, later clarified that only people who visited the compromised website during the period before the official announcement and “connected a wallet or signed an approval” were at risk. People who had used Flap normally before were unaffected and didn’t need to change their wallet addresses. He also said Flap does not store private keys, seed phrases, or wallet data.
But keep one thing in mind: a drainer doesn’t need your private key to steal your money. The approval you signed is enough for it to transfer your coins.
flap.sh was restored this afternoon and is working normally again. The backup domain flap.cool will also remain available. Both URLs take you to the same website and the same product. The warnings will gradually disappear as the partners’ systems are updated.
What exactly happened this morning? Blockaid initially flagged flap.sh, kintsu.xyz, and stonkbrokers.cash as possibly having been targeted in front-end attacks. It later listed 10 websites where StepDrainer had been deployed. According to media reports, at least 12 crypto websites were affected in this wave. Flap’s official statement said flap.sh had been hit by DNS hijacking: the URL was typed correctly, but it opened someone else’s website.
Cedric, the boss, later clarified that only people who visited the compromised website during the period before the official announcement and “connected a wallet or signed an approval” were at risk. People who had used Flap normally before were unaffected and didn’t need to change their wallet addresses. He also said Flap does not store private keys, seed phrases, or wallet data.
But keep one thing in mind: a drainer doesn’t need your private key to steal your money. The approval you signed is enough for it to transfer your coins.
