Blockaid flags Step Drainer toolkit in DNS hijack affecting 12 DeFi websites
first published 2026-10-31T11:00:00Z
Blockaid said it identified the Step Drainer toolkit across 12 DeFi websites, including Flap, Kintsu, StonkFun, Pickle Finance, Echelon, Origami Finance, FluxBeam, StakePoint, SupSwap, Longbow, Shprd Finance, and APEX. Flap confirmed a DNS hijack that redirected its official domain, while StonkFun said it restored its site after moving infrastructure. No attacker, victim count, or total losses were disclosed.
AI Analysis
The summary reports a DNS hijack affecting multiple DeFi sites and a drainer toolkit being identified, which is clearly negative and could trigger short-term risk aversion. Impact is moderate because the article names many affected sites but gives no confirmed attacker, losses, or broader market consequences.
Expected Investor Sentiment: Bearish
Potential Market Impact: Significant
