DeFi Hack: 15 Websites Compromised, User Wallets at Risk
Written with artificial intelligence.
A cyberattack has compromised 15 DeFi websites, potentially exposing users' wallets to hackers. Some $138,000 in stolen cryptocurrencies have been traced to three wallets, although the full extent of the breach remains unclear.
Overview of the Attack
Recent reports indicate that hackers have taken control of 15 DeFi websites, including those of Flap, Kintsu, Pickle Finance, and Origami Finance. Users who connected their wallets to these sites may have inadvertently given hackers access to their cryptocurrencies.
Method of Attack
The compromised sites were redirected to manipulated versions that employed malware known as Step Drainer. This malicious software tricks users into approving transactions, allowing the hackers to siphon off their digital assets. Importantly, the actual smart contracts of the affected DeFi protocols were not compromised, according to multiple sources. All identified domains were registered through Name.com, which has since restored access.
Financial Impact
The total financial damage from this incident is still uncertain. However, reports indicate that approximately $138,000 in stolen cryptocurrencies have been traced to three specific wallets. The number of users affected by this breach has not yet been determined.
Context of Security Incidents
This attack is part of a troubling trend of security breaches in the crypto space. Recent incidents include the discovery of compromised hardware wallets at Ledger and a data leak affecting users at Coinbase. Additionally, the FBI attributed a significant hack on Binance to North Korean hackers, highlighting ongoing vulnerabilities in the industry.