Hackers hijack 12 DeFi websites, steal $202,000
Key points
- Hackers hijacked 12 decentralised finance websites registered with Name.com and used fake pages to drain cryptocurrency wallets.
- Blockchain analytics firm Bitquery traced $202,386 in losses across 32 wallets on six blockchains.
- One Kintsu user lost $160,531, accounting for approximately 79% of the traced stolen funds.
Blockchain analytics firm Bitquery has identified 12 Name.com-registered DeFi websites hijacked in attacks that drained $202,386 from cryptocurrency wallets.
The attack affected 32 wallets across six blockchains, with most losses occurring on Monad.
“happened on Vercel's end,” Kintsu said, blaming the cloud infrastructure provider for the website hijacking.
The attackers deployed Step Drainer, a malicious tool that tricked visitors into signing transactions that transferred their digital assets.
Bitquery traced the stolen funds across six networks, identifying three primary receiving wallets linked to the operation.
All 12 affected domains shared Name.com as their registrar, although they used four different DNS providers.
One Kintsu user lost $160,531, while approximately $56,600 in stolen staking tokens remained in an unstaking queue.
The incident highlights how compromised website infrastructure can expose cryptocurrency users to wallet-draining attacks, even when blockchain protocols remain operational.
Frequently asked questions
More from Crypto
China targets crypto-linked corruption in anti-graft push
Chainalysis discloses cybersecurity incident affecting customer data
US brothers sentenced to 366 months over crypto robbery
Binance schedules phased withdrawals after security breach
Binance hack exposes security gaps across five blockchain networks
Five crypto networks linked to AI compute demand
