LaunchOnSF restores StonkFun after frontend attack
BROBROK News · Based on reporting by DiarioBitcoin ·
LaunchOnSF said it restored the StonkFun website after finding malicious code in its frontend. The incident was linked to a StepDrainer campaign that, according to the cited report, affected at least 12 DeFi and token-launch sites. The team said smart contracts were not impacted and no user losses had been reported.
Key points
- Blockaid reportedly identified at least 12 affected sites, including StonkFun and other DeFi platforms.
- The intrusion was tied to compromised domains and DNS systems that allowed malicious scripts to be inserted.
- The fake prompts were designed to capture wallet approvals and signatures.
- LaunchOnSF said StonkFun's smart contracts were not affected.
- Users were advised to review and revoke suspicious permissions if they interacted with the sites.
Why it matters
The case highlights how a project can be compromised at the website layer even when onchain contracts remain untouched. For DeFi users, it underscores the risk of signing malicious prompts on a seemingly legitimate site.
Original headline: “LaunchOnSF restaura StonkFun tras un ataque de StepDrainer que habría alcanzado al menos 12 sitios”
Read the original on DiarioBitcoin
Summary and analysis written by BROBROK News from the original report. Read the full story on the source website. Not investment advice.