Across restores website after domain hijacking attack
Key points
- Across Protocol restored its website and services after attackers hijacked its domain through a social engineering attack.
- The incident involved domain registrar Namecheap, with the fraudulent website flagged by SEAL911 and blocked through Cloudflare.
- Across pledged to reimburse affected users and investigate how the domain takeover occurred.
Across Protocol has regained control of its website after attackers hijacked its domain through a social engineering attack targeting registrar Namecheap.
The attacker gained control of the Across domain at approximately 18:45 UTC, prompting an emergency shutdown.
“Within 15 minutes of this attack, we were alerted and immediately worked to shut the site down,” the team said on X.
SEAL911 flagged the fraudulent website as phishing, while Cloudflare removed its DNS records to block access.
Some users visiting the compromised domain before the shutdown may have exposed their wallets to malicious transactions.
Across pledged to fully reimburse affected users and advised them to revoke wallet permissions granted during the incident.
The protocol confirmed its frontend and API were restored, while third-party integrations and API users remained unaffected.
Across plans to publish a post-mortem explaining the domain takeover and has urged users to trust official communication channels only.
Frequently asked questions
More from Crypto
Alta raises $80 million to build banking blockchain
LNbits releases emergency patch after wallet vulnerability
TON Strategy reports $13.1 million in quarterly revenue
Poland’s Sejm backs bill allowing crypto freezes
Forward Industries expands Solana holdings to 8.7 million SOL
Grayscale commits $1 million to support Zcash ecosystem
