Kintsu's official website has resumed pointing to normal infrastructure, but the team still advises against connecting wallets for now.

On October 31, Kintsu, a liquid staking protocol built on the Monad blockchain, announced that its official website, kintsu.xyz, has been restored and now redirects to the project's infrastructure. However, due to incomplete DNS cache propagation, some networks may still access the malicious site within the next hour.

Kintsu advises users to continue avoiding the official website and refrain from connecting wallets until an official security confirmation notice is issued.

Previously, security firm Blockaid warned that its systems detected an active frontend attack linked to the StepDrainer toolkit targeting three websites: Kintsu, Flap, and StonkBrokers. The affected sites were injected with malicious scripts that could redirect users to a malicious asset transfer page upon clicking "Connect Wallet."

Blockaid advised users to temporarily cease using the aforementioned decentralized applications, stating that it is investigating the incident, gathering additional information, and will publish further updates subsequently.