Kintsu is the liquid staking protocol being built on Monad. Kintsu’s first product was a liquid staking protocol based on the Aleph Zero blockchain, but it has since switched its focus to building on Monad.
Pons founder Ozzy posted on X platform that, according to a Blockaid warning, the StepDrainer attack previously targeting projects such as Kintsu and Flap is expanding and now involves StonkFun, Pickle Finance, Echelon, Origami, Fluxbeam, Stakepoint, SupSwap, Longbow, SHPRD, and ApeX DeFi. Blockaid reminds users to temporarily avoid visiting the above websites and the previously disclosed affected DApps, and not to connect their wallets.
World Liberty advisor Ogle posted on X platform stating that they received an alert from security firm Blockaid, warning users to temporarily avoid visiting the relevant websites or connecting wallets. According to the publicly disclosed alert information, Blockaid stated it has detected an active front-end attack related to the StepDrainer toolkit, involving Kintsu, Flap, and StonkBrokers. The affected sites have been injected with malicious scripts, and users who click "Connect Wallet" may be redirected to malicious asset-draining pages. Blockaid is currently investigating and gathering more information, with further updates to be announced.
Kintsu stated that the official website has resumed normal operations, but due to DNS caches not being fully refreshed, some networks may still be able to access malicious websites within the next hour. The team advised users not to visit the official website or connect their wallets until officially confirmed safe.
Kintsu has stated its official website domain has been restored and is pointing back to normal infrastructure. However, due to the time required for DNS cache clearing, some networks may still access the malicious website within the next hour. Kintsu reminds users to continue avoiding visiting the website and connecting wallets until an official security confirmation notice is issued.
Odaily reports: Kintsu officially announced that its official website is currently displaying a malicious site to users due to a DNS hijacking incident at its domain registrar. Users are urged not to visit the website, connect their wallets, or sign any transactions. If users have connected their wallets or signed transactions since 00:00 (UTC) on October 31, they should immediately revoke the relevant approvals via the Revoke platform and transfer their assets. Further notice will be provided once the website is confirmed to be secure again.
Pons founder Ozzy posted on X platform that, according to a Blockaid warning, the StepDrainer attack previously targeting projects such as Kintsu and Flap is expanding and now involves StonkFun, Pickle Finance, Echelon, Origami, Fluxbeam, Stakepoint, SupSwap, Longbow, SHPRD, and ApeX DeFi. Blockaid reminds users to temporarily avoid visiting the above websites and the previously disclosed affected DApps, and not to connect their wallets.
World Liberty advisor Ogle posted on X platform stating that they received an alert from security firm Blockaid, warning users to temporarily avoid visiting the relevant websites or connecting wallets. According to the publicly disclosed alert information, Blockaid stated it has detected an active front-end attack related to the StepDrainer toolkit, involving Kintsu, Flap, and StonkBrokers. The affected sites have been injected with malicious scripts, and users who click "Connect Wallet" may be redirected to malicious asset-draining pages. Blockaid is currently investigating and gathering more information, with further updates to be announced.