DefiLlama founder: friend.tech and forked versions store user keys on the frontend, which makes them vulnerable to frontend attacks.
BlockBeats reported on September 21st that 0xngmi, the founder of DefiLlama, stated on social media that "currently, friend.tech and all forked versions store users' keys on the frontend, so it is possible to steal users' keys or all funds through frontend updates. Some people may not store the complete key on the frontend, but they have the key in the frontend memory, so they are vulnerable to supply attacks regardless."