TREE NEWS update: Flap, Kintsu and Origami confirmed their websites were redirected on Friday night in a wallet-drainer attack tied to domain registrar Name.com, with the cause still disputed. Blockaid flagged nine additional DeFi front ends as affected. Who opened the door to the redirects remains unclear.
Wallet-Drainer Attack Hits DeFi Front Ends via Name.com Redirects
The disputed cause is the real story here: when a registrar-level redirect can hit multiple DeFi front ends at once, the trust assumption shifts from smart contracts to DNS and domain operations — a layer most users never see and protocols rarely audit. This affects any team relying on third-party registrars, not just the named projects, since a single compromised account can expose every visitor regardless of on-chain security. Watch whether the attribution dispute resolves and whether registrar-level controls become part of standard front-end risk reviews.
Generated by AI for reference only.
Share on WeChat
Open WeChat → Scan → then tap "…" to send to a chat or Moments.
Tap "…" in the top-right corner to send to a chat or share to Moments.