At least 12 decentralized finance websites were hijacked in a coordinated attack targeting the DNS records of domains registered with Name.com. The smart contracts were not compromised: visitors were redirected to attacker-controlled pages loaded with the Step Drainer toolkit and tricked into signing fraudulent transactions. Approximately $138,000 in stolen funds has been identified through on-chain data, although the total could still change. Named victims include Flap, Kintsu, StonkFun and Pickle Finance, while some projects quickly regained control of their traffic by migrating to Vercel and Cloudflare nameservers. Name.com had not publicly acknowledged the incident on its status page or blog at the time of the reports.
Source: Read the original article
