DeFi
Neutral
Name.com restores hijacked DeFi domains after wallet‑drainer attack
Image: UnchainedName.com said its registrar was improperly redirected, leading to a wallet‑drainer campaign that targeted DeFi front ends. The attack ran Oct. 30‑31 and redirected at least 12 project sites, including Flap, Kintsu and Origami Finance. On‑chain losses were estimated at $138,000. All affected domains have been restored while investigations continue.
Key points
- Name.com restored all affected domains after a DNS hijacking campaign that redirected DeFi sites to malicious pages.
- Ten of the compromised domains were hosted on Vercel, and both Name.com and Vercel are investigating the cause.
Why it matters
The incident shows that domain registration services are a potential attack vector for DeFi users, highlighting the need for robust DNS security and monitoring.
What's unclear
It remains unclear how the attackers gained control of the Name.com registrar accounts or whether a reseller such as Vercel was involved.
The full list of hijacked domains has not been disclosed, with reports naming only a subset of the affected sites.
Sources · 2 publishers
Unchained
Tier 1
Wallet-Drainer Attack on DeFi Front Ends Traces to Name.com, With Cause Still Unclear
Coverage timeline
- First reported by Crypto Briefing
- Also reported by Unchained
- CryptoVideos brief published
How this page is checked. AI drafted this brief from selected independent reports. Automated checks compare numbers, source coverage and topic terms, but may miss errors. Publication and evidence refreshes run automatically. Read the linked reports for context. Report an error
