Hack of 12 Crypto Projects: AI Agents and Step Drainer

Last night, cybersecurity firm Blockaid discovered a large-scale attack using the malicious tool Step Drainer, designed to steal cryptocurrency from users' wallets.

Affected Projects

• Flap and Kintsu confirmed DNS hijacking of their websites.
• Blockaid found the same Step Drainer on ten additional domains: StonkFun, Pickle Finance, Echelon, Origami Finance, FluxBeam, Stakepoint, SupSwap, Longbow, SHPRD, and ApeX DeFi.

If you interacted with the affected sites today, check your wallet permissions via Revoke.cash. Revoke suspicious permissions, and if you signed malicious transactions, transfer remaining assets to a new wallet.

Attacker Methods

According to Chainalysis, the attacker used AI-agent-based attack methods and gained unauthorized access to internal systems. Leaks of user IDs, names, email addresses, and role designations in client organizations have been confirmed.