Morning Edition · Sunday, November 1, 2026Published at 1:46 AM EDT · New York

Hijacked domain records sent visitors of 12 DeFi sites to a wallet drainer, taking about $138,000

All 12 sites used the registrar Name.com. In the same week, Chainalysis disclosed a customer-data breach and a London victim lost $14,000 after a street theft, and an Ethereum proposal would let wallets check transaction previews themselves.

At about 00:00 UTC on October 31, someone changed the domain-name records of twelve DeFi websites (Cyber Sec Guru). The sites included Flap, Kintsu, Pickle Finance, Origami Finance and StonkFun. The attack exploited the Domain Name System (…