Skip to content
Meme coin display pages used for phishing attacks result in multiple traders losing funds.

Meme coin display pages used for phishing attacks result in multiple traders losing funds.

Kucoin • September 16, 2026

BlockBeats news, September 16: Recently, meme coin markets have surged, with on-chain trading activity increasing significantly. However, as market conditions warm, highly convincing phishing links have frequently appeared on meme coin listing pages, and novel attack methods have deceived even seasoned traders.

Crypto KOLs @insidecalls and @cladzsol recently reported that, while browsing meme coins during routine chain scanning, they clicked on a meme coin’s homepage and were prompted with a “Cloudflare verification” message. After following the instructions to “complete verification,” their on-chain funds were stolen. @cladzsol lost approximately $600,000 in assets.

BlockBeats found that on the landing pages of several recently popular meme coins, users are redirected to a "Cloudflare verification" page, which is actually a phishing link. If users follow the prompts and perform the requested actions, malicious scripts will be downloaded and executed on their systems, resulting in asset loss.

This phenomenon is widespread, possibly due to delayed review processes on major trading aggregation platforms like DexScreener. Current platform display logic directly pulls the "official website" or social media links from the token's metadata—fields that can be updated by the token creator or anyone claiming to have "taken over" the community. Hackers exploit this review loophole to turn meme coin listing pages into new phishing hunting grounds.

BlockBeats reminds users that during chain scanning, it may be unavoidable to click on unfamiliar links. If a "Cloudflare verification" or any other highly suspicious page appears, close it immediately and avoid interacting with it to protect your asset security.

Extracted Entities

Attack Types (1)

Companies (1)

Platforms (1)