News linked to both this project and an event.
Flap stated that the team is still investigating the root cause of the previous DNS attack and has not yet confirmed whether it is related to the domain service provider. To enhance security and platform stability, the official website has been migrated to flap.cool, and users are reminded to temporarily avoid accessing the old domain flap.sh or using it to connect wallets and sign transactions.
Flap posted on X that the team is investigating whether the recent DNS attack is related to the domain service provider, and the specific cause has not yet been identified. Flap has migrated to the new domain flap.cool and reminds users not to visit flap.sh for now, or connect wallets or sign transactions on that domain; users visiting flap.sh will be redirected to the new domain.
Pons founder Ozzy posted on X platform that, according to a Blockaid warning, the StepDrainer attack previously targeting projects such as Kintsu and Flap is expanding and now involves StonkFun, Pickle Finance, Echelon, Origami, Fluxbeam, Stakepoint, SupSwap, Longbow, SHPRD, and ApeX DeFi. Blockaid reminds users to temporarily avoid visiting the above websites and the previously disclosed affected DApps, and not to connect their wallets.
World Liberty advisor Ogle posted on X platform stating that they received an alert from security firm Blockaid, warning users to temporarily avoid visiting the relevant websites or connecting wallets. According to the publicly disclosed alert information, Blockaid stated it has detected an active front-end attack related to the StepDrainer toolkit, involving Kintsu, Flap, and StonkBrokers. The affected sites have been injected with malicious scripts, and users who click "Connect Wallet" may be redirected to malicious asset-draining pages. Blockaid is currently investigating and gathering more information, with further updates to be announced.
Flap posted on X that its official website is currently experiencing a DNS hijacking and has been redirected to an unauthorized website. The team reminds users not to visit the official website, connect wallets, or sign any transactions for the time being, and states that they are working on the issue and will publish an update once the website is confirmed to be safe.