🚨This is CONCERNING. 12 DeFi websites were hijacked and turned into wallet drainers in just ONE night. Blockaid found the sites "actively serving" Step Drainer, a kit that fakes normal-looking wallet pop-ups to trick visitors into approving transfers. Step Drainer is sold to scammers as a ready-made kit and works across more than 20 blockchains. Once a victim approves, it goes after their most valuable tokens first. Researchers have even seen its prompt show a fake "+500 USDT" so the approval looks like money coming in. Affected projects include Flap, Kintsu, StonkFun, Pickle Finance, Echelon, Origami Finance, FluxBeam, StakePoint, SupSwap, Longbow, Shprd Finance and APEX. About $138,000 has been traced so far, and that excludes losses on Solana and Aptos. All 12 domains were registered with Name(.)com, though how they were hijacked is still unconfirmed. Name(.)com's only public response so far has been asking users to fill out its abuse form, per The Block. Not every affected team has confirmed its site is clean yet.