Anyone who visited one of at least twelve DeFi sites registered with US registrar Name.com during the night to October 31, 2026 may not have landed on the real site. Attackers had redirected the DNS records of these domains and sent visitors to copies running a wallet drainer. The address in the browser looked perfectly normal. According to Bitquery’s analysis, 32 wallets lost a combined $202,386, while The Block puts the figure at around $138,000. The most important consequence for you: if you confirmed a transaction or signature on one of the affected sites on October 30 or 31, you should revoke the approvals granted in the process.
The projects’ smart contracts themselves were untouched, according to Kintsu, Origami Finance, FluxBeam and StonkFun. The attack did not target the blockchain but the route to it: the website through which users connect their wallet. That is exactly why such an attack hits retail investors directly, and exactly why no protocol audit helps you here.
Name.com hijack: what happened during the night to October 31
According to Read Entire Article
English (US)