Kintsu's official website has been restored, but the team still advises against connecting wallets for now.

October 31: Kintsu, a liquid staking protocol built on the Monad blockchain, posted that its official website kintsu xyz has been restored and is pointing back to the project's infrastructure. However, due to incomplete DNS cache refresh, some networks may still access the malicious website within the next hour.

The team reminds users to continue avoiding visiting kintsu xyz and not to connect wallets until an official security confirmation notice is issued.

Previously, security firm Blockaid warned that its system detected an ongoing front-end attack related to the StepDrainer toolkit, involving three websites: kintsu, flap, and stonkbrokers.

Blockaid stated that the affected websites were implanted with malicious scripts. After users click "Connect Wallet," they may be redirected to a malicious asset transfer page. The firm advises users to temporarily refrain from using the above decentralized applications and says it is investigating the attack and gathering more information, with further updates to be announced later.