Wallet-Drainer Attack on DeFi Front Ends Traces to Name.com, With Cause Still Unclear
By Unchained
AI summary of the source article
Domain registrar Name.com restored multiple domains that were improperly redirected in an attack targeting visitors' crypto wallets. DeFi projects including Flap, Kintsu, and Origami Finance confirmed frontend hijackings affecting their websites.
Key facts
- Name.com stated multiple domains were improperly redirected late Friday as part of a campaign to access visitors' crypto wallets.
- Web hosting provider Vercel reported that 10 Vercel-associated domains were among those affected and restored.
- Web3 security firm Blockaid identified nine sites actively serving the Step Drainer malware following the DNS redirects.
Source excerpt · Unchained
Flap, Kintsu and Origami confirmed their sites were redirected on Friday night, while Blockaid flagged nine more; who opened the door is still disputed. The post Wallet-Drainer Attack on DeFi Front Ends Traces to Name.com, With Cause Still Unclear appeared first on Unchained .