After Blockaid linked 12 crypto project websites to attacks, Flap and Kintsu confirmed their sites’ routing systems had been compromised and warned users not to connect their wallets or sign transactions.
In a new security incident targeting crypto users, the risk of assets being stolen from wallets through project websites came into focus. According to Wu Blockchain, security firm Blockaid first detected possible front-end attacks on the websites of Flap and Kintsu, then identified 10 additional sites hosting the Step Drainer tool used to drain wallets.
This brought the number of sites linked to the investigation to 12. The additional reported addresses include pickle[.]finance, origami[.]finance and fluxbeam[.]xyz. As the investigation continued, Flap and Kintsu confirmed that their own sites had been affected by DNS hijacks. DNS is the system that determines which server an internet address points to, so this type of interference can redirect users from a project’s genuine website to a malicious page.
Kintsu urges users who interacted with the site from 03:00 onward
Kintsu advised users who connected a wallet to its site or signed any transactions from around 03:00 TRT on October 31 to revoke the permissions they had granted and move their funds. The project’s stated start time corresponds to 00:00 UTC.
Both Kintsu and Flap asked users not to visit their websites, connect wallets, or sign transactions. Both projects said they would separately announce when their websites could be used safely again.
Flap clarifies the scope of risky interactions
Flap founder Cedric said users who had previously connected to the project’s genuine website were not affected by those earlier connections. According to the statement, the risk applies to users who, during the tens of minutes before the announcement, visited the malicious site and connected a wallet or signed a transaction approval.
While Kintsu specified a start time, Flap limited its warning to interactions with the malicious site before its announcement. As a result, the two projects’ user warnings cover different time periods.
Not investment advice.