Flap hacked
Flap's official website flap.sh was compromised via DNS hijacking, redirecting users to a malicious clone site. Attackers used a wallet-drainer toolkit to trick users into signing malicious transactions, leading to asset drainage. The team has migrated to a new domain, flap.cool, and warned users against interacting with the old site.
- Protocols
- Flap
- Confidence
- High
- First seen
- 31 Oct 2026, 11:31 UTC