Hackers hijack 12 DeFi websites registered with Name.com, draining about $138K
At least 12 DeFi websites were hijacked via DNS vulnerabilities at the registrar level, leading to approximately $138,000 being drained using the Step Drainer toolkit. The smart contracts were not breached, but users were redirected to malicious sites. Some affected teams have recovered by migrating their domains to different nameservers.
- Estimated loss
- $138,000
- Protocols
- Flap, Kintsu, Pickle Finance, StonkFun
- Confidence
- High
- First seen
- 31 Oct 2026, 16:28 UTC