Hackers Hijack Domains of 15 DeFi Projects to Drain User Wallets
Hackers redirected users of 15 crypto projects to fake pages and tried to drain their tokens through malicious signature requests, according to Blockaid.
- published on Newsmetry
- original source published
the same feed is available to bots and dashboards through the api. connect the api →
what happened
Hackers redirected visitors of 15 crypto project websites to fake pages in order to steal digital assets, according to a report on x.com citing cybersecurity firm Blockaid. The attack ran overnight from October 30 to 31. By changing DNS settings, attackers sent users who typed the correct address to a counterfeit site. There, a prompt asked them to sign a transaction that looked routine but could let attackers drain tokens. Registrar Name.com confirmed unauthorized changes to 15 client domains and restored them.
why it matters
For DeFi markets this is a reminder that frontend attacks can bypass sound smart contracts, since the danger lies in what users sign. Bitquery estimated losses at $202,386 from 32 wallets, but the final scale is unknown and about $56,600 in Kintsu tokens still sat in an unstaking queue.
tags
instruments
sources
- Hackers Hijack Domains of 15 DeFi Projects — x.com, 1 November 2026 at 12:15 UTC
prepared by the newsmetry newsroom with ai assistance from the sources listed below. not investment advice.
alerts on your topics, the morning digest and the api — in your account.
get stories in real time ↗