Step Drainer attack has spread to 10 websites including StonkFun and Pickle Finance

October 31: According to monitoring by SolanaFloor, the Step Drainer attack has been detected on 10 additional websites,including stonkfun.xyz, pickle.finance, echelon.market, origami.finance, fluxbeam.xyz, stakepoint.app, supswap.xyz, longbow.cash, shprd.finance and apexdefi.xyz. SolanaFloor said it is actively investigating and gathering more data.

In addition, StonkFun said its website has been restored after migrating to new infrastructure, with on-chain operations unaffected and no users currently known to be impacted.

It is understood that the Step Drainer attack is a highly active malware-as-a-service (MaaS) wallet drainer tool in the Web3 and cryptocurrency space.