Blockaid Warns of Malicious Scripts on Three Sites
Security researchers identified malicious code on the Kintsu, Flap, and Stonkbrokers decentralized applications.
Updated on Oct. 31, 2026 in Cybersecurity
Live Poll
Do you trust decentralized finance websites to secure your digital wallet during the connection process?
Security firm Blockaid has issued a warning regarding malicious scripts embedded on three popular cryptocurrency websites. The vulnerability allows attackers to redirect users to fraudulent asset-transfer pages after they attempt to connect their wallets.
Why it matters
The discovery highlights an ongoing risk to decentralized application users who interact with front-end website interfaces. Unauthorized access to digital assets remains a primary threat for participants in the crypto ecosystem.
Blockaid identified the presence of the StepDrainer toolkit integrated into the front-end code of Kintsu, Flap, and Stonkbrokers. The malicious scripts specifically target the Connect Wallet function to facilitate unauthorized redirects.
The players
Blockaid
Blockaid is a cybersecurity firm that provides security infrastructure and threat detection services to protect users of decentralized applications and Web3 platforms.
The details
When users navigate to these sites and select the option to connect a wallet, the malicious scripts intercept the request and redirect the user to a page designed to transfer assets. Security experts advise against interacting with these platforms until the underlying vulnerability is addressed.
Timeline
October 31, 2026: Blockaid issued an alert regarding the malicious StepDrainer campaign.
The Tech Race
This incident highlights the ongoing arms race between decentralized finance developers and cybercriminals utilizing tools like the StepDrainer toolkit to exploit front-end interfaces. These attacks mark a shift from targeting core protocol code to compromising the user-facing web layers of dApps.
Users should avoid clicking the Connect Wallet button on the Kintsu, Flap, and Stonkbrokers websites to prevent potential unauthorized asset transfers. Verifying site integrity and utilizing hardware wallets for interactions can help mitigate the risk of falling victim to such redirects.
The takeaway
Always exercise extreme caution when granting permissions to your cryptocurrency wallet through web browser interfaces. Even seemingly legitimate sites can be compromised by front-end attacks that put your digital holdings at direct risk.
Further reading
Learn more about securing your digital assets in the Cybersecurity section.
Source note: This article includes information reported by TokenPost.
Live Poll
Do you trust decentralized finance websites to secure your digital wallet during the connection process?
