Name.com restores hijacked domains after attack hit at least 12 DeFi front ends

The registrar says all affected domains are back, but a wallet drainer campaign reportedly took approximately $138,000 from users first Name.com says hackers hijacked 15 customer domains, including 10 tied to Vercel. All of the affected domains have now been restored. That is the good news. The less good news is that the hijacked addresses reportedly sent crypto users to malicious pages built to empty their wallets. The campaign ran between October 30 and 31, 2026. It hit at least 12 decentralized finance project websites, and estimates put the on-chain losses at approximately $138,000. How the attack worked Think of a domain name as the address on a storefront sign. DNS is the system that tells your browser which building that sign actually points to. If someone gets into the registrar, the company that manages those records, they can quietly swap the building. The sign looks the same. You walk in anyway. That is roughly what happened here. Visitors typed familiar DeFi URLs and landed on lookalike pages under attacker control. Those pages ran a tool known as the Step Drainer. It tricked users into signing transactions they did not intend to approve, which then drained their wallet...