Signs of Attacks Found at 12 Overseas Crypto Sites; Users Urged to Be Cautious Linking Wallets
Summary
- Security firm Blockaid said it detected "Step Drainer" at 10 additional sites, including Pickle Finance, Origami Finance and Fluxbeam, beyond Flap and Kints.
- The attackers altered DNS information, creating a risk of asset theft even when users visited a legitimate address if they connected wallets or approved transactions.
- Flap founder Cedric said users who had connected wallets to the legitimate site were not affected, while those who connected wallets or approved permissions on the tampered site during the several dozen minutes before the notice were exposed to risk.
Forecast Trend Report by Period
Blockaid, a blockchain security firm, said on October 30 that it had identified 10 additional compromised sites tied to the incident, beyond Flap and Kints. The firm said it detected "Step Drainer," a wallet-draining tool, on sites including Pickle Finance, Origami Finance and Fluxbeam.
The attack targeted website pages where users connect wallets and approve transactions. If DNS information is altered, users can be routed to pages created by attackers even when they enter a legitimate address. Approving wallet permissions or signing transactions there can put their assets at risk of theft.
Cedric, founder of Flap, said users who had connected their wallets to the legitimate site were not affected. Those exposed to risk were users who visited the tampered site during the several dozen minutes before the notice was posted and then connected wallets or approved permissions.
Doohyun Hwang
cow5361@bloomingbit.ioKEEP CALM AND HODL🍀