Cross-chain protocol Across: Domain Hijacked After Registrar Suffers Social Engineering Attack

On November 11, according to an official announcement from the cross-chain protocol Across, its domain registrar Namecheap was subjected to a social engineering attack, allowing the attacker to gain control of the Across domain. The project stated that the attack occurred at around 02:45 Beijing Time, and the team received alerts within 15 minutes and began shutting down the website.

Across stated that Cloudflare subsequently revoked the domain's DNS records, rendering the phishing site inaccessible; while some users who previously visited the site may have been affected, third-party integrations and API users were not affected. The project advised users who believe they were affected to contact the team and revoke the attacker's permissions, and its frontend and API will remain shut down until domain security is restored.