Step Drainer Activity Detected on 10 More Crypto Websites

Step Drainer activity was detected on 10 additional crypto websites, including StonkFun and Pickle Finance. The detections extend the reported footprint of the wallet-stealing tool to a wider group of named sites.

The domains are stonkfun.xyz, pickle.finance, echelon.market, origami.finance, fluxbeam.xyz, stakepoint.app, supswap.xyz, longbow.cash, shprd.finance and apexdefi.xyz.

StonkFun said its website is back online after a move to new infrastructure. The project said on-chain operations were unaffected and that it knew of no users affected. That status update covers StonkFun’s site; it does not describe recovery at the other named websites.

An investigation is underway, and more data is being collected. Step Drainer is a malware-as-a-service wallet-stealing tool described as highly active in Web3 and crypto. The update identifies the websites involved but does not provide a combined measure of user impact or losses across the 10 domains.