Signs of Attacks Found on 12 Overseas Crypto Sites; Caution Urged When Connecting Wallets
Summary
- Blockaid, a security firm, said Step Drainer was detected on a total of 12 sites, including Flap, Kints, Pickle Finance, Origami Finance and FluxBeam.
- Attackers altered DNS records so that users visiting legitimate addresses were redirected to malicious pages, where approving wallet permissions or signing transactions could expose wallet assets to theft.
- Cedric, founder of Flap, said users who had connected their wallets to the legitimate site were unaffected, and that only those who connected wallets or approved permissions on the tampered site during the several dozen minutes before the notice were exposed to risk.
Forecast Trend Report by Period
Blockaid, a security firm, said on October 30 that it had identified 10 additional compromised sites beyond Flap and Kints. The wallet-draining tool "Step Drainer" was detected on sites including Pickle Finance, Origami Finance and FluxBeam.
The attack targeted website pages where users connect wallets and approve transactions. If DNS records are altered, users can be directed to pages created by attackers even when they enter a legitimate address. Approving wallet permissions or signing transactions on those pages could put wallet assets at risk of theft.
Cedric, founder of Flap, said users who had connected their wallets to the legitimate site earlier were not affected. Those exposed to risk were users who visited the tampered site during the several dozen minutes before the notice was posted and then connected a wallet or approved permissions.
