THE BLOCK · 2026-10-31 15:26 UTC

Hackers hijack a dozen DeFi websites, all registered with Name.com, and steal about $138,000

Hackers hijacked a dozen DeFi websites registered through Name.com, including Flap, Kintsu, Pickle Finance, and Origami Finance, using Step Drainer malware to steal from visitors' wallets. About $138,000 in stolen funds traced to three wallets on EVM chains; 10 of the 12 hijacked domains were suspended by Name.com on Saturday morning. Step Drainer is a malware-as-a-service kit sold for $750 or $150 with 20% commission, supporting over 20 blockchain networks.

Loading the story on Tree News…