Steakhouse Financial’s front-end system was hacked; users should be alert for phishing risks

Gate News message: DeFi risk management platform Steakhouse Financial recently suffered a hacker attack, and its website and applications were used to carry out phishing scams. The company said the incident only affected the front-end systems, and that all deposits and contracts were unaffected, so users’ funds are safe. Co-founder Sébastien Derivaux reminded users to avoid visiting the Steakhouse website until further notice.

According to Steakhouse’s disclosure, the attack originated from social-engineering tactics aimed at its server provider, OVH Cloud. The attackers obtained sensitive information over the phone, tampered with the website and application IP addresses, and attempted to carry out a five-day deadline domain transfer. The company has revoked the malicious changes and pointed the domain to blank records until it confirms the systems are secure. Steakhouse said it will publish a complete incident analysis report as soon as possible.

Blockaid, a crypto security company, noted that the attackers used the Angelferno (also known as Angel Drainer) program, which is an on-chain active wallet-draining tool that can fully control a user’s crypto assets and withdraw funds after the user signs a malicious transaction. Blockaid previously helped AI crypto company GAIB discover a similar attack; the malicious sites were removed within about 7 hours, and there was no apparent loss.

At present, several crypto companies are offering alternative services and security safeguards to customers who have funds held with Steakhouse. Steakhouse emphasized that it is working to fully restore the front-end systems and is in communication with OVH to ensure that similar incidents will not happen in the future.

This incident once again reminds crypto users that improving security awareness is crucial—especially when interacting with DeFi platforms and digital asset services. Users should carefully verify the authenticity of websites and applications to prevent the risk of on-chain funds being stolen. Experts advise users to regularly update their security measures and to be vigilant against attacks carried out through social engineering or phishing links.