Hack history / 2026 / Hack or exploit
Flap
Hack or exploit on Oct 31, 2026 · DNS Hijacking
ONE SOURCE · 1 SOURCE
Lost
undisclosed
dollars at the time
Returned
none listed
as the sources state it
Rank
not ranked
collapses, frauds and later news are not ranked
What happened
Flap (a modular token launch platform)’s official website flap.sh was hit by a DNS hijacking attack and redirected to a malicious clone site. Attackers gained control at the domain registrar level, pointed DNS to a malicious Dutch server, and deployed the StepDrainer wallet-drainer toolkit. This tricked users who visited and connected wallets into signing malicious transactions (e.g., unlimited approvals) to drain assets. The team warned users not to visit the site, connect wallets, or sign anything, and migrated to the new domain flap.cool.
Details
- Date
- Oct 31, 2026
- Kind
- Hack or exploit
- Method
- DNS Hijacking
- How in
- Keys, accounts and infrastructure
- Target
- not stated
- Chains
- BNB Chain
Reported by
Cite this page
SwanBluechip, "Flap hack, Oct 31, 2026: undisclosed lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht84f0479352/ (data as of 2026-10-31).