Blockaid alerts users to frontend attack serving Step Drainer across flap.sh, Kintsu and 10 other dApps

𝕏/@blockaid_ •

Revision history

6 recorded changes

🖱️ 20👤 14🤖 6

20 clicks·~3.5k impressions·0.6% CTR

Web Telegram LinkedIn Discord

Want your article here?

Promote with Leviathan News

Blockaid says its system detected a frontend attack affecting flap.sh and kintsu.xyz, urging users not to sign transactions or interact with those dApps until the issue is resolved. The firm later reported the same attack on ten additional sites actively serving the Step Drainer: stonkfun.xyz, pickle.finance, echelon.market, origami.finance, fluxbeam.xyz, stakepoint.app, supswap.xyz, longbow.cash, shprd.finance and apexdefi.xyz. Blockaid states it is actively investigating and gathering more data, with no resolution or root cause detailed in the alert.

AI summary of the linked source — not editorial content.

Story signal · how it spread on X · via Elfa

as of 31 Oct 08:49 UTC

Spread

Distinct X and Telegram accounts Elfa counted behind this story’s reports, summed over the thread. Not posts, not impressions.

32 accounts

first post 31 Oct 02:13
Leviathan +5.4 h later

31 Oct 02:1331 Oct 08:22

Thread · 4 events · last update 31 Oct 08:22

31 Oct 02:14First reportFlap warns users after DNS hijacking redirects its website to a phishing page24 acc.
31 Oct 02:33UpdateBlockaid warns of a potential frontend attack targeting Flap, Kintsu and Clutch Markets4 acc.
31 Oct 06:56UpdateUnconfirmed reports say Flap was hacked, with Four.Meme blamed2 acc.
31 Oct 07:36Leviathan published this article
31 Oct 08:22UpdateMultiple DeFi frontends reportedly compromised in an active drainer attack2 acc.

All times UTC.

Cited posts

@flapdotsh Flap 🦋First reportOn X ↗
Our official website, https://t.co/9FwWnFw4KX , is currently affected by a DNS hijacking incident and is redirecting to an unauthorized website. Please do not visit the site, connect your wallet, or sign any transactions until further notice. We are actively working to restore it…
@OdailyChina OdailyNewsOn X ↗
🦋Flap疑似被黑客攻击，用户连钱包时被引导到假的连接页面 X 上用户 @liquidated0x 发帖称 https://t.co/KyvX2NvdMu 被入侵，出现假的 Wallet Connected 弹窗该用户在 https://t.co/xddQufIj80 点击 Launch 后先遇到 404 错误，刷新后出现“preparing your transaction”弹窗。随后一笔 0.0678 BNB… https://t.co/llHgXhZwnl
@aveai_info Ave.aiOn X ↗
⚠ 安全提醒 ⚠ Flap 官网遭遇 DNS 劫持，已被重定向至未经授权网站。https://t.co/QoStyL5a38 第一时间做出相应措施，在此也提醒用户暂停访问、连接钱包及签名操作，避免用户资金受损。官网恢复前，请勿访问网站或进行任何交互，仅以官方公告为准。 https://t.co/KdV1ugCcOJ

Show 3 more cited posts

@irene_cc06 I0On X ↗
今天早上，https://t.co/pkmkkVYcjK 域名遭遇恶意劫持，攻击者复制并伪造了 Flap 官网首页。我们希望向社区说明以下情况： 1. 平台核心功能正常运行此次攻击仅涉及官网首页，Flap 其他产品界面包括创币，金库和锁仓及功能均正常运行，未受到此次事件影响。 2. 用户资产安全，链上资金未受影响…
@ShabbirWeb3 𝗦𝗛𝗔𝗕𝗕𝗜𝗥On X ↗
Flap just confirmed their official site https://t.co/2EtWduFLQc got DNS hijacked. It’s redirecting to an unauthorized page that looks like a phishing site. Do not open https://t.co/2EtWduFLQc right now. Do not connect your wallet. Do not sign anything. If you already gave any…
@cryptobraveHQ 加密无畏On X ↗
BNB Chain 上发行与交易平台 Flap @flapdotsh 已启用新的域名 https://t.co/hSs9dyPokg 此前域名疑似遭遇DNS攻击恶意劫持，目前已经恢复正常使用 Flap 已将其官方网站迁移至新域名 https://t.co/hSs9dyPokg，并建议用户直接通过新域名访问，暂时不要访问旧域名 https://t.co/w6sW72MIKP… https://t.co/sKyNfQqXyc

26 more accounts posted about this · 6 Telegram channels (no public link)

Social-monitoring data, not investment advice Elfa post text from Xas of 31 Oct 08:49 UTC

Blockaid alerts users to frontend attack serving Step Drainer across flap.sh, Kintsu and 10 other dApps

Story signal · how it spread on X · via Elfa

Cited posts

More on Blockaid

Blockaid flags ongoing exploit on Tranche Vault tied to Fence Finance and Valinor on Avalanche, ~$1.01M drained

Blockaid launches Bridge Sentinel, a LayerZero DVN that screens cross-chain messages for fraud

Blockaid reports ongoing exploit on unnamed Base vault, over $6M drained via whitelisted contract

Blockaid detects exploit on More Markets’ Flow EVM deployment as attacker drains 15.5M WFLOW from its mFlowWFLOW lending reserve

Sandbox SAND token faces large-scale minting exploit on Base. Blockaid and PeckShield detected hackers using LayerZero permissions to create roughly 14.9B SAND tokens across hundreds of transactions.

Blockaid says Coldcard's $111M+ exploit exposes crypto's "original sin" as private keys remain a single point of failure despite offline hardware wallet security

Blockaid flags ongoing exploit on Tranche Vault tied to Fence Finance and Valinor on Avalanche, ~$1.01M drained

Blockaid launches Bridge Sentinel, a LayerZero DVN that screens cross-chain messages for fraud

Blockaid reports ongoing exploit on unnamed Base vault, over $6M drained via whitelisted contract

Blockaid detects exploit on More Markets’ Flow EVM deployment as attacker drains 15.5M WFLOW from its mFlowWFLOW lending reserve

Sandbox SAND token faces large-scale minting exploit on Base. Blockaid and PeckShield detected hackers using LayerZero permissions to create roughly 14.9B SAND tokens across hundreds of transactions.

Blockaid says Coldcard's $111M+ exploit exposes crypto's "original sin" as private keys remain a single point of failure despite offline hardware wallet security

Total stats

How to Earn

More on Blockaid

Blockaid flags ongoing exploit on Tranche Vault tied to Fence Finance and Valinor on Avalanche, ~$1.01M drained

Blockaid launches Bridge Sentinel, a LayerZero DVN that screens cross-chain messages for fraud

Blockaid reports ongoing exploit on unnamed Base vault, over $6M drained via whitelisted contract

Blockaid detects exploit on More Markets’ Flow EVM deployment as attacker drains 15.5M WFLOW from its mFlowWFLOW lending reserve

Sandbox SAND token faces large-scale minting exploit on Base. Blockaid and PeckShield detected hackers using LayerZero permissions to create roughly 14.9B SAND tokens across hundreds of transactions.

Blockaid says Coldcard's $111M+ exploit exposes crypto's "original sin" as private keys remain a single point of failure despite offline hardware wallet security

Blockaid flags ongoing exploit on Tranche Vault tied to Fence Finance and Valinor on Avalanche, ~$1.01M drained

Blockaid launches Bridge Sentinel, a LayerZero DVN that screens cross-chain messages for fraud

Blockaid reports ongoing exploit on unnamed Base vault, over $6M drained via whitelisted contract

Blockaid detects exploit on More Markets’ Flow EVM deployment as attacker drains 15.5M WFLOW from its mFlowWFLOW lending reserve

Sandbox SAND token faces large-scale minting exploit on Base. Blockaid and PeckShield detected hackers using LayerZero permissions to create roughly 14.9B SAND tokens across hundreds of transactions.

Blockaid says Coldcard's $111M+ exploit exposes crypto's "original sin" as private keys remain a single point of failure despite offline hardware wallet security

Blockaid alerts users to frontend attack serving Step Drainer across flap.sh, Kintsu and 10 other dApps

Story signal · how it spread on X · via Elfa

Cited posts

More on Blockaid

Blockaid flags ongoing exploit on Tranche Vault tied to Fence Finance and Valinor on Avalanche, ~$1.01M drained

Blockaid launches Bridge Sentinel, a LayerZero DVN that screens cross-chain messages for fraud

Blockaid reports ongoing exploit on unnamed Base vault, over $6M drained via whitelisted contract

Blockaid detects exploit on More Markets’ Flow EVM deployment as attacker drains 15.5M WFLOW from its mFlowWFLOW lending reserve

Sandbox SAND token faces large-scale minting exploit on Base. Blockaid and PeckShield detected hackers using LayerZero permissions to create roughly 14.9B SAND tokens across hundreds of transactions.

Blockaid says Coldcard's $111M+ exploit exposes crypto's "original sin" as private keys remain a single point of failure despite offline hardware wallet security

Blockaid flags ongoing exploit on Tranche Vault tied to Fence Finance and Valinor on Avalanche, ~$1.01M drained

Blockaid launches Bridge Sentinel, a LayerZero DVN that screens cross-chain messages for fraud

Blockaid reports ongoing exploit on unnamed Base vault, over $6M drained via whitelisted contract

Blockaid detects exploit on More Markets’ Flow EVM deployment as attacker drains 15.5M WFLOW from its mFlowWFLOW lending reserve

Sandbox SAND token faces large-scale minting exploit on Base. Blockaid and PeckShield detected hackers using LayerZero permissions to create roughly 14.9B SAND tokens across hundreds of transactions.

Blockaid says Coldcard's $111M+ exploit exposes crypto's "original sin" as private keys remain a single point of failure despite offline hardware wallet security

Comments

Total stats

How to Earn

More on Blockaid

Blockaid flags ongoing exploit on Tranche Vault tied to Fence Finance and Valinor on Avalanche, ~$1.01M drained

Blockaid launches Bridge Sentinel, a LayerZero DVN that screens cross-chain messages for fraud

Blockaid reports ongoing exploit on unnamed Base vault, over $6M drained via whitelisted contract

Blockaid detects exploit on More Markets’ Flow EVM deployment as attacker drains 15.5M WFLOW from its mFlowWFLOW lending reserve

Sandbox SAND token faces large-scale minting exploit on Base. Blockaid and PeckShield detected hackers using LayerZero permissions to create roughly 14.9B SAND tokens across hundreds of transactions.

Blockaid says Coldcard's $111M+ exploit exposes crypto's "original sin" as private keys remain a single point of failure despite offline hardware wallet security

Blockaid flags ongoing exploit on Tranche Vault tied to Fence Finance and Valinor on Avalanche, ~$1.01M drained

Blockaid launches Bridge Sentinel, a LayerZero DVN that screens cross-chain messages for fraud

Blockaid reports ongoing exploit on unnamed Base vault, over $6M drained via whitelisted contract

Blockaid detects exploit on More Markets’ Flow EVM deployment as attacker drains 15.5M WFLOW from its mFlowWFLOW lending reserve

Sandbox SAND token faces large-scale minting exploit on Base. Blockaid and PeckShield detected hackers using LayerZero permissions to create roughly 14.9B SAND tokens across hundreds of transactions.

Blockaid says Coldcard's $111M+ exploit exposes crypto's "original sin" as private keys remain a single point of failure despite offline hardware wallet security