Over 5,400 hacked sites serve ClickFix payloads via blockchain

BleepingComputer reports blockchain-stored ClickFix payloads across thousands of hacked sites, and here is what is actually confirmed so far.

BleepingComputer reported on 2026-09-05 that over 5,400 hacked sites are serving ClickFix payloads stored on the blockchain. That headline is the only detail available at time of writing: no figures on which chains are involved, how the sites were compromised, or who is behind the campaign have been published.

Until BleepingComputer publishes the full report, treat every other claim about this campaign as unverified. This post does not speculate on method, scale beyond the reported count, or attribution, because the source material does not provide that information.

Why analysts should care

A payload stored on a blockchain rather than a conventional server changes the takedown calculus. Hosting providers can pull content; a smart contract or on-chain data store generally cannot be taken down the same way, which is likely why BleepingComputer's headline draws attention to the storage method rather than just the site count.

• Whether the payload sits in contract bytecode, calldata, or an inscription-style data field
• Which chain or chains are named once the full report is available
• Whether the 5,400 figure refers to distinct domains, distinct payload variants, or something else
• Whether any on-chain addresses are published for lookup

What to do right now

Read the BleepingComputer report directly rather than relying on secondhand summaries, since a headline-only story like this one is easy to overstate. If and when the report names specific addresses or contracts, run those through your own tooling before repeating any claim about them as fact.

Nothing here has been verified by WalletDNA. If addresses surface in follow-up reporting, that is the point to start checking them, not before.

When on-chain addresses tied to this campaign are published, WalletDNA can be used to look up wallet history and flags against them.