Hackers hijack 12 DeFi websites, steal $202,000 - grafa.com

Blockchain analytics firm Bitquery has identified the attacks, which affected 32 wallets across six blockchains, with most losses occurring on the Monad network. One Kintsu user suffered a significant loss of $160,531, while approximately $56,600 in stolen staking tokens remained in an unstaking queue.

Infrastructure Vulnerability

The attackers deployed Step Drainer, a malicious tool that tricked visitors into signing transactions that transferred their digital assets. Bitquery traced the stolen funds across six networks, identifying three primary receiving wallets linked to the operation.

All 12 affected domains shared Name.com as their registrar, although they used four different DNS providers. The incident highlights how compromised website infrastructure can expose cryptocurrency users to wallet-draining attacks, even when blockchain protocols remain operational.