---
title: "Origami Says DNS Is Restored, but Vaults Remain Paused"
url: https://thecoingazette.com/origami-says-dns-is-restored-but-vaults-remain-paused/
date: 2026-10-31
modified: 2026-10-31
lang: en
author: "Coin Gazette Editorial"
description: "Origami Finance announced that its vault funds remained secure after a DNS hijacking on October 31 that targeted several DeFi websites."
categories:
  - "Crypto News"
tags:
  - "crypto"
  - "DeFi Exploits"
  - "dns hijack"
  - "Origami finance"
word_count: 189
---

# Origami Says DNS Is Restored, but Vaults Remain Paused

Origami Finance reported that its vault funds were unaffected following an October 31 DNS hijacking incident that targeted multiple DeFi websites. However, the protocol's hOHM vault remained restricted, with an on-chain contract readout showing that deposits and withdrawals were paused.

Attackers redirected visitors from legitimate [DeFi](https://thecoingazette.com/tag/defi/) websites to malicious pages linked to the Step Drainer toolkit. Blockchain security firm [Blockaid](https://x.com/blockaid_/status/2116368762488107157) identified the campaign across multiple websites, including Origami Finance, Pickle Finance and Kintsu.

Although the incident targeted website infrastructure rather than Origami's underlying smart contracts, users who connected wallets or signed malicious transactions could have faced asset-theft risks.

The continued pause of the hOHM vault represents a separate operational restriction. The product provides leveraged OHM exposure through gOHM collateral and USDS debt, allowing users to mint and redeem hOHM through its smart contracts.

Origami has assured users that the vault funds remain secure; however, this assurance does not imply that withdrawals are currently available. Until the protocol officially confirms the resumption of normal operations, users should differentiate between the security of the underlying vault assets and their ability to access those assets.

Read the full story at [The Defiant](https://thedefiant.io/news/security/origami-says-dns-is-restored-but-vaults-remain-paused)