Wallet-Drainer Attack on DeFi Front Ends Traces to Name.com, With Cause Still Unclear

Flap, Kintsu and Origami confirmed their sites were redirected on Friday night, while Blockaid flagged nine more; who opened the door is still disputed. Domain registrar Name.com said on Saturday that a number of domains on its platform “were improperly redirected late Friday as part of a plan to access visitors’ crypto wallets,” and that it had put them back. The company said in a post on X that it was investigating and would share updates in the same thread. It has not said how the attackers gained control or which domains were involved.