LaunchOnSF restores website as StepDrainer attack spreads to 10 more sites
A malicious toolkit called StepDrainer was injected into the frontends of at least 12 DeFi and token-launch websites, including LaunchOnSF, pickle.finance, and echelon.market. The attack harvested token approvals and signatures through fraudulent wallet-connection requests. LaunchOnSF has restored its website, and no user funds were reported lost.