DeFi DNS attack hits 12 sites as Blockaid flags Step Drainer toolkit
A Halloween DNS attack compromised at least 12 DeFi websites, with security firm Blockaid identifying the Step Drainer toolkit on the affected pages. Blockaid's initial warning named Flap and Kintsu as targets. Teams are urging users not to connect wallets or sign transactions, a reminder that front-end and DNS compromise remains a live risk for DeFi users and could weigh on confidence in affected protocols.