Security firm Blockaid initially flagged potential frontend attacks targeting Flap and Kintsu, later identifying 10 additional websites, including pickle[.]finance, origami[.]finance, and fluxbeam[.]xyz, serving the Step Drainer wallet-draining tool. Flap and Kintsu have confirmed DNS hijacks affecting their websites, warning users against visiting, connecting wallets, or signing transactions. Kintsu advised users who connected wallets or signed anything since approximately 00:00 UTC on October 31 to revoke approvals and move funds. Both projects stated they would announce when their websites are safe to use.