Signs of Attacks Found at 12 Overseas Crypto Sites; Users Urged to Be Cautious Linking Wallets
Blockaid, a blockchain security firm, said on October 30 that it had identified 10 additional compromised sites tied to the incident, beyond Flap and Kints. The firm said it detected "Step Drainer," a wallet-draining tool, on sites including Pickle Finance, Origami Finance and Fluxbeam.The attack targeted website pages where users connect wallets and approve transactions. If DNS information is altered, users can be routed to pages created by attackers even when they enter a legitimate address. Approving wallet permissions or signing transactions there can put their assets at risk of theft.Cedric, founder of Flap, said users who had connected their wallets to the legitimate site were not affected. Those exposed to risk were users who visited the tampered site during the several dozen minutes before the notice was posted and then connected wallets or approved permissions.