Digital Asset
Intelligence
Security Incident · Wallet

12 DeFi frontends (including Flap, Kintsu, Supply Chain Attack: $138.00K Reported Loss

·Source-attributed incident record

Incident Overview

On/around October 31, 2026, at least 12 DeFi websites (mostly registered via Name.com) suffered DNS/registrar-level hijacking. Traffic was redirected to malicious frontends serving the StepDrainer wallet-drainer kit. Users who connected wallets and signed transactions had assets stolen; the underlying smart contracts were not compromised.

Sources & References

Original incident referencehttps://www.theblock.co/news/defi/2026-10-31-hackers-hijack-a-dozen-defi-websites-all-registered-with-name-com-and-steal-about-138000-432251 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    Flap

    Attack methodDNS Hijacking
    Reported lossNot disclosed
  2. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 59,800
  3. Incident date
    Target

    Qubic

    Attack methodPrivate Key Leakage
    Reported loss$ 1,300,000
  4. Incident date
    Target

    Gamdom

    Attack methodHot Wallet Server Compromise
    Reported loss$ 4,208,000
  5. Incident date
    Target

    b14g

    Attack methodUnknown
    Reported loss$ 1,360,000