StepDrainer Hits 12 Crypto Sites in DNS Hijack Wave

At least 12 cryptocurrency websites were targeted in a coordinated wave of frontend attacks on October 31, with malicious code redirecting users toward wallet-draining pages after attackers compromised domain infrastructure serving decentralized finance protocols and token launch platforms. The affected projects include Flap, Kintsu and StonkFun, alongside several DeFi applications. Blockchain security firm Blockaid linked the incidents to StepDrainer, a malicious toolkit designed to steal cryptocurrency through fraudulent wallet connections and transaction approvals. The attacks targeted website infrastructure rather than the underlying blockchain protocols.