Blockaid Warns of StepDrainer Attack on Three Crypto Websites

Blockaid warned that an ongoing front-end attack linked to the StepDrainer toolkit is affecting Kintsu, Flap and Stonkbrokers, where connecting a wallet may send users to malicious asset-transfer pages.

The security firm said malicious scripts were inserted into the affected websites. Users who click “Connect Wallet” may be redirected to a page intended to move assets, Blockaid warned. The alert centers on the websites’ wallet-connection flow and the possible redirect that follows.

Blockaid advised users to temporarily avoid the three decentralized applications while it investigates. The firm said it is collecting more information and plans to provide further updates.

In this case, Blockaid described scripts on the named sites and a possible redirect after a wallet connection. The warning identifies Kintsu, Flap and Stonkbrokers as the affected applications.