Kintsu said a DNS hijack at its domain registrar rerouted its website to a malicious page and issued guidance for people who had used the site.
Kintsu’s guidance covers users who connected a wallet to its site or signed a transaction at or after 8 p.m. ET Friday, Oct. 30, which was 00:00 UTC Oct. 31. The advice was to use Revoke to cancel related approvals and move their assets.
Kintsu’s warning covered site visits, wallet connections and transaction signing for as long as the malicious page was displayed. The project told users to avoid the website and said a further alert would follow once it had verified the site’s safety.
Blockaid said it was investigating suspected wallet attacks at Kintsu, Flap and StonkBrokers and warned that wallet connections could direct visitors to fraudulent pages, as EconoTimes previously reported. The firm also cited StepDrainer as a toolkit tied to the suspected activity.
