Steakhouse Financial front end hacked; Deposits unaffected

Steakhouse Financial disclosed that its website and app were compromised and replaced with a phishing front end. The company described the incident as limited to its interface, with customer deposits and on-chain contracts unaffected.

In a post on its official account, the DeFi risk curator warned that new visitors are likely interacting with a malicious version deployed by attackers. “No deposits are at risk. No contracts are affected. All Steakhouse depositors are safe,” the statement read. “We are working to restore the frontend as soon as possible.”

Co-founder Sébastien Derivaux urged users to avoid the website and app until further notice.

The company emphasized that the breach targets the front end-the user-facing layer-rather than the underlying smart contracts. Front-end phishing attacks swap a legitimate interface with a lookalike that prompts wallet owners to approve harmful transactions.

Security firm Blockaid reported that code linked to Angelferno, also known as Angel Drainer, is present in the attack. It describes Angelferno as one of the largest active wallet-drainer operations on-chain.

Blockaid also pointed to a similar pattern earlier this month involving AI-focused crypto firm GAIB, where social engineering gave intruders access to the company’s domain and enabled a copycat site using Angelferno code. The malicious GAIB site was removed roughly seven hours after detection, with no apparent user losses, according to Blockaid.

After Steakhouse’s alert, several crypto firms posted guidance and provided alternative interfaces or safety checks for users with funds tied to Steakhouse-managed positions. Community responses included security warnings and jokes, alongside repeated calls to avoid the compromised site.

No further updates on the investigation or a restoration timeline had been shared at the time of writing.