SlowMist Founder Warns of Monad Airdrop Address Hijacking Vulnerability

SlowMist founder Yu Xian disclosed on November 25 that attackers hijacked some users' Monad airdrop addresses to attacker-controlled wallets, according to his post on X. The vulnerability allowed attackers who compromised user sessions on the Monad airdrop claiming page to alter recipient wallet addresses without additional verification, Yu explained. Users are advised to verify whether their bound wallet addresses on the Monad airdrop claiming page match their intended addresses, as compromised accounts resulted in airdrops being distributed to attacker addresses.