Back Weex

Gitcoin Subdomain Suffered Frontend Attack, Suspected of Embedding Phishing Program

Weex • June 21, 2026

Blockchain security company Blockaid stated that its detection system found signs of a front-end attack on the Gitcoin subdomain files[.]gitcoin[.]co, with suspected malicious code named "Eleven drainer" included in the website, used for wallet asset theft. Blockaid warns users not to interact with the website at this time, and the related issues are under investigation and repair.

Where new wealth is made

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Gitcoin Subdomain Targeted by Frontend Attack with Phishing Script On June 21, 2026, Blockaid reported a front-end attack on the Gitcoin subdomain files.gitcoin.co. The attack involves a malicious code known as 'Eleven drainer,' which is designed to steal wallet assets from users. Blockaid has issued a warning advising users not to interact with the compromised website while investigations and repairs are underway. The exact scope of the impact is currently unknown, but the attack raises significant concerns about user security on the platform. No specific numbers or CVEs have been disclosed at this time. The situation is ongoing, and users are advised to remain vigilant. 4 sources 49

Extracted Entities

Gitcoin Subdomain Suffered Frontend Attack, Suspected of Embedding Phishing Program

The full story

Extracted Entities

Attack Types (1)

Companies (1)

Domains (1)

Malware (1)

MITRE ATT&CK (1)