Flap posted at 10:13 PM ET on Oct 30 that its official website flap.sh "is currently affected by a DNS hijacking incident and is redirecting to an unauthorized website," and asked users not to visit it, connect wallets or sign transactions until further notice. Flap has not said how its DNS was taken over or whether any funds were lost.

If you interacted with flap.sh in the last few hours, check for and revoke any token approvals you don't recognize.