🚨 **DeFi DNS Hijack Alert: 15+ Websites Compromised!** 🚨
A coordinated DNS hijacking attack targeted over a dozen DeFi protocols registered through Name.com, resulting in at least $138,000 stolen from unsuspecting users.
**What happened?**
Attackers compromised frontends for platforms like Flap, Kintsu, Pickle Finance, and Origami Finance. The hijacked sites were rigged with "Step Drainer"—a Malware-as-a-Service toolkit that tricks visitors into approving malicious wallet transfers.
**The Aftermath:**
* **Contracts Safe:** The underlying smart contracts were completely untouched; the exploit was entirely frontend-based.
* **Domains Restored:** Name.com has restored the 15 affected domains and is actively investigating the breach alongside cloud infrastructure provider Vercel.
* **Losses:** Over $138,000 has been traced across EVM chains, routed through wallets taking fixed percentage cuts.
🔒 **Security Tip:** Always double-check transaction permissions before signing approvals, even on familiar DeFi sites! A compromised frontend can drain your funds in seconds.
Have you ever encountered a compromised frontend while trading? Stay safe out there and share your thoughts below! 👇
$ESPORTS $IDOL $AIN
#defi #CryptoSecurity #Hack #CryptoSecurity2025 #CryptoNews
A coordinated DNS hijacking attack targeted over a dozen DeFi protocols registered through Name.com, resulting in at least $138,000 stolen from unsuspecting users.
**What happened?**
Attackers compromised frontends for platforms like Flap, Kintsu, Pickle Finance, and Origami Finance. The hijacked sites were rigged with "Step Drainer"—a Malware-as-a-Service toolkit that tricks visitors into approving malicious wallet transfers.
**The Aftermath:**
* **Contracts Safe:** The underlying smart contracts were completely untouched; the exploit was entirely frontend-based.
* **Domains Restored:** Name.com has restored the 15 affected domains and is actively investigating the breach alongside cloud infrastructure provider Vercel.
* **Losses:** Over $138,000 has been traced across EVM chains, routed through wallets taking fixed percentage cuts.
🔒 **Security Tip:** Always double-check transaction permissions before signing approvals, even on familiar DeFi sites! A compromised frontend can drain your funds in seconds.
Have you ever encountered a compromised frontend while trading? Stay safe out there and share your thoughts below! 👇
$ESPORTS $IDOL $AIN
#defi #CryptoSecurity #Hack #CryptoSecurity2025 #CryptoNews
