Hack history / 2026 / Hack or exploit
12 DeFi frontends (including Flap, Kintsu, etc.)
Hack or exploit on Oct 31, 2026 · Supply Chain Attack
ONE SOURCE · 1 SOURCE
Lost
$138K
dollars at the time
Returned or recovered
none listed
as the sources state it
Rank
#1,577
among thefts by dollars lost
What happened
On/around October 31, 2026, at least 12 DeFi websites (mostly registered via Name.com) suffered DNS/registrar-level hijacking. Traffic was redirected to malicious frontends serving the StepDrainer wallet-drainer kit. Users who connected wallets and signed transactions had assets stolen; the underlying smart contracts were not compromised.
Details
- Date
- Oct 31, 2026
- Kind
- Hack or exploit
- Method
- Supply Chain Attack
- How in
- Keys, accounts and infrastructure
- Target
- DeFi protocol or token (estimate: SlowMist chain category)
- Chains
- BNB Chain
What would have stopped it all controls for this way in
- What users load is locked down: build pipeline, dependencies, CDN, DNS and third-party scripts.
Check: Who can change the code served to users, listed; dependencies pinned; DNS registrar locked; third-party scripts reviewed. - Freeze contacts are arranged before they are needed: stablecoin issuers, the large exchanges, SEAL 911.
Check: A contact sheet with named people, confirmed this quarter; one drill sending a freeze request.
General guidance for this kind of attack, not a finding about this incident.
How sure: 0 of 4 checks what the checks mean
- Witnessesone source so far
- Same storyneeds a second source
- Blockchain receiptno public attack transaction checked
- Official wordno official statement linked
Who says what
- SlowMist Hacked ↗$138K
Figure used: $138K, the figure SlowMist Hacked gives. Each source's own figure is in dollars at the time.
Related incidents
Carson DeFi 2023 · Hack or exploit · $150K
Over $35 million lost as contagion from Euler hack spreads throughout defi 2023 · Hack or exploit · $37.6M
CEO of Ragnarok metaverse game admits to treasury mismanagement, including nearly $2 million in trading losses and exorbitant salaries 2022 · Fraud · $1.8M
CoinGecko&Etherscan&DeFi Pulse 2022 · Phishing · undisclosed
Hacker pulls $1 million from defi project, then destroys contract without withdrawing the funds 2022 · Hack or exploit · $1M
Over $35 million lost as contagion from Euler hack spreads throughout defi 2023 · Hack or exploit · $37.6M
CEO of Ragnarok metaverse game admits to treasury mismanagement, including nearly $2 million in trading losses and exorbitant salaries 2022 · Fraud · $1.8M
CoinGecko&Etherscan&DeFi Pulse 2022 · Phishing · undisclosed
Hacker pulls $1 million from defi project, then destroys contract without withdrawing the funds 2022 · Hack or exploit · $1M
Cite this page
SwanBluechip, "12 DeFi frontends (including Flap, Kintsu, etc.) hack, Oct 31, 2026: $138K lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht45c846e9c8/ (data as of 2026-11-07).