Origami Finance reported that its vault funds were unaffected following an October 31 DNS hijacking incident that targeted multiple DeFi websites. However, the protocol’s hOHM vault remained restricted, with an on-chain contract readout showing that deposits and withdrawals were paused.
Attackers redirected visitors from legitimate DeFi websites to malicious pages linked to the Step Drainer toolkit. Blockchain security firm Blockaid identified the campaign across multiple websites, including Origami Finance, Pickle Finance and Kintsu.
Although the incident targeted website infrastructure rather than Origami’s underlying smart contracts, users who connected wallets or signed malicious transactions could have faced asset-theft risks.
The continued pause of the hOHM vault represents a separate operational restriction. The product provides leveraged OHM exposure through gOHM collateral and USDS debt, allowing users to mint and redeem hOHM through its smart contracts.
Origami has assured users that the vault funds remain secure; however, this assurance does not imply that withdrawals are currently available. Until the protocol officially confirms the resumption of normal operations, users should differentiate between the security of the underlying vault assets and their ability to access those assets.
Read the full story at The Defiant
