According to CoinMeta, GoPlusSecurity reports that on October 31st, the official websites of Flap and Kintsu were hijacked by DNS. It is possible that the attackers infiltrated the domain name registrars, resulting in the hijacking of over 10 domain names. By manipulating DNS, the attackers redirected traffic to malicious clone websites in order to steal assets. When users clicked on "Connect Wallet" on these clone websites, they were redirected to fraudulent pages. The methods of theft included: 1. Users signed transactions that transferred BNB to the attackers' wallets; 2. Users authorized the attackers' wallets to spend their tokens, after which the attackers used `transferFrom` to transfer the tokens. The wallet addresses controlled by the attackers are 0x24497068ca4166ca32a04ae530ce00cf79755bd5. Kintsu has since been restored to online service, and Flap has also been recovered, with alternative domain names still available for use. The cause of the hijacking of DNS is still under investigation. Security recommendations include remaining vigilant, paying attention to any unusual behavior, and immediately investigating any suspicious transfers, transferring assets to a secure wallet if detected.