# Step Drainer Activity Detected on 10 More Crypto Websites

By Simon Yoon

Canonical URL: https://www.tokenpost.com/news/technology/45484
Published: 2026-10-31T12:17:08.000Z
Updated: 2026-10-31T12:17:08.000Z
Section: Technology

> StonkFun says its site is back after a move to new infrastructure, with no on-chain disruption or known user impact.

Step Drainer activity was detected on 10 additional crypto websites, including StonkFun and Pickle Finance. The detections extend the reported footprint of the wallet-stealing tool to a wider group of named sites.

The domains are stonkfun.xyz, pickle.finance, echelon.market, origami.finance, fluxbeam.xyz, stakepoint.app, supswap.xyz, longbow.cash, shprd.finance and apexdefi.xyz.

StonkFun said its website is back online after a move to new infrastructure. The project said on-chain operations were unaffected and that it knew of no users affected. That status update covers StonkFun’s site; it does not describe recovery at the other named websites.

An investigation is underway, and more data is being collected. Step Drainer is a malware-as-a-service wallet-stealing tool described as highly active in Web3 and crypto. The update identifies the websites involved but does not provide a combined measure of user impact or losses across the 10 domains.