Hackers hijack 12 DeFi websites registered with Name.com, draining about $138K

A DNS hijack at the registrar level sent users of Flap, Kintsu, Pickle Finance and others to sites loaded with the Step Drainer toolkit At least 12 decentralized finance websites were hijacked in a coordinated attack. The smart contracts behind them were never breached. The attackers went after the domain names instead. The Block has traced about $138,000 in stolen funds so far using onchain data. Every affected domain was registered with Name.com, according to public registry records the outlet reviewed. Security firm Blockaid reported the incident on October 31, 2026.