Blockaid is examining suspected wallet attacks affecting Kintsu, Flap and StonkBrokers, warning that visitors who try to connect a wallet on the sites may be diverted to pages meant to steal assets.
The security firm said code on the websites may change where a wallet connection leads, sending visitors to fraudulent pages. It linked the suspected activity to StepDrainer, a toolkit.
The reported risk concerns the sites’ front ends, or the website layers visitors use to reach the services, and focuses on the wallet-connection step. Blockaid said its investigation was continuing as it gathered further information.
