Flap and Kintsu domain hijacking redirects users to crypto-draining sites
The DNS of Flap and Kintsu was hijacked, redirecting visitors to fake sites and crypto wallet-draining pages. Both services recovered their domains. Blockaid said the same StepDrainer attack was found on 10 additional DeFi sites, and the total amount of losses has not been determined.
Key facts
- Affected organisation
- Flap
- Incident type
- Phishing & smishing
- Occurred / detected
- Not confirmed
- Scale of damage
- Not confirmed
- Cause / method
- DNS hijacking redirecting visitors to forged sites that use StepDrainer to steal assets from wallets
- Location
- Other countries
If your data was exposed
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
Timeline
- Visitors were redirected to forged crypto-draining sites through the DNS hijacking of Flap and Kintsu, and both services recovered their domains.
- Blockaid found the same StepDrainer attack on 10 additional DeFi sites, and the total amount of losses has not been determined.
2 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.