DeFi DNS attack hits 12 sites as Blockaid flags Step Drainer

A Halloween attack has targeted at least 12 DeFi websites, with Blockaid identifying the Step Drainer toolkit across affected pages and teams warning users against connecting wallets or signing transactions. Blockaid identified Flap, Kintsu, and 10 more websites in alerts about the frontend attack. Flap confirmed a DNS hijack that redirected its official domain to an unauthorized website. StonkFun restored its website after moving infrastructure and said it was unaware of affected users. The alerts identify compromised websites, while the number of victims and any losses remain unestablished.