Search results

1 report for “StepDrainer wallet-drainer kit (served via hijacked legitimate dApp domains)”

Searched by keyword.

StepDrainer wallet drainer served through hijacked domains of Flap, Kintsu and 10 more DeFi sites

On 31 October 2026 Flap and Kintsu said attackers had hijacked their domains, and Blockaid found the StepDrainer wallet drainer on ten more DeFi sites. The sites are the projects' own domains, taken over; users who connected wallets should revoke approvals.

StepDrainer wallet-drainer kit (served via hijacked legitimate dApp domains)

Reported Oct 31, 20261 report

Results reflect reports submitted to Scammers.com. Entries marked “Unverified” have not yet been reviewed. A listing is not a finding that any person or business committed fraud.