Cross-Chain Protocol Across: Domain Hijacking Stemmed From Social Engineering Attack on Registrar, Will Compensate Affected Users

November 11 — Cross-chain protocol Across posted on X that at around 02:45 Beijing time on November 11, its domain registrar Namecheap suffered a social engineering attack, giving the attacker control of the Across domain. The team was alerted within 15 minutes and began shutting down the website. across.to has now been flagged as a phishing site by SEAL911, and Cloudflare subsequently revoked the domain's DNS records, so the phishing site is no longer accessible.

Some users who visited across.to before this may be affected; third-party integrations and API users are not affected. Across said all affected users will be compensated and advised users to revoke relevant approvals via revoke.cash. The Across frontend and API will remain shut down until domain security is restored. Across has not yet disclosed the amount of losses.