Echelon stories

Oct 31, 2026

Hackers hijack 12 DeFi websites through Name.com DNS attack

At least 12 decentralized finance websites registered with Name.com were hijacked through a DNS attack, with hackers draining approximately $138,000 by redirecting users to malicious sites loaded with wallet-draining tools.

Oct 31, 20263 sources

Top claims

▪The 12 DeFi websites hijacked through the Name.com DNS attack were injected with Step Drainer, a Malware-as-a-Service toolkit that compromised frontends to harvest unlimited token approvals and signatures across more than 20 blockchain networks
▪Hackers hijacked at least 12 decentralized finance websites registered through Name.com in a DNS hijacking attack that rewrote domain records to redirect users to malicious frontend infrastructure
▪Attackers behind the Name.com DNS hijacking attack redeemed Kintsu's staked MON tokens on Monad and withdrew funds from lending protocol Neverland, while on Robinhood Chain they extracted tokenized stock assets including NVDA and AAPL from Morpho

Topics

Cybercrime Robinhood Chain DeFi exploits DeFi Crypto Scams Crypto security Crypto hacks

Related entities

Nederland Pickle Finance