
Typing the right web address didn't protect a lot of DeFi users on Friday night. Attackers hijacked the domains of about a dozen sites, including @flapdotsh, and pointed them at a wallet drainer. The contracts were never touched. People got drained signing on fake pages. When you connect to a site, always check your approvals. Do you bookmark your dapps?
