According to CoinMeta, blockchain security research firm Blockaid reported that 12 DEFI websites were hijacked overnight to become wallet theft tools, known as Step Drainer. This tool disguised itself as a normal wallet pop-up, enticing users to approve transfers and targeting the most valuable tokens first. Researchers found that it displayed a false prompt of “+500 USDT”, making the approval seem like a fund inflow. Affected projects included Flap, Kintsu, Stonkfun, Pickle Finance, etc., with losses amounting to approximately $138,000, not including the losses on Solana and Aptos. All 12 domain names were registered with name.com, and the method of hijacking has not yet been confirmed. name.com responded by asking users to fill out an abuse form, and the security of all affected teams’ websites has not yet been verified.