LaunchOnSF restores website as StepDrainer attack spreads to 10 more sites
A malicious toolkit called StepDrainer was injected into the frontends of at least 12 DeFi and token-launch websites, including LaunchOnSF, pickle.finance, and echelon.market. The attack harvested token approvals and signatures through fraudulent wallet-connection requests. LaunchOnSF has restored its website, and no user funds were reported lost.
- Protocols
- LaunchOnSF, StonkFun, pickle.finance, echelon.market, origami.finance, fluxbeam.xyz
- Confidence
- High
- First seen
- 31 Oct 2026, 12:00 UTC