Across Protocol restores website after hackers hijack domain
The cross-chain bridge said a social engineering attack targeting domain registrar Namecheap allowed hackers to redirect users to a phishing site.
Across Protocol, a prominent cross-chain bridge, regained control of its website after a social engineering attack on its domain registrar, Namecheap, on Tuesday. The attackers managed to redirect users to a phishing site, replacing Across Protocol's website with the malicious one. The team regained control of the domain, across.to, through assistance from Namecheap founder Richard Kirkendall.
All systems are now functioning normally, and all affected users will be compensated, with a comprehensive post-mortem to be released in the coming days. Earlier warnings urged users to avoid the app following reports of drained wallets, though the total losses and number of impacted users are still undisclosed. Security response group SEAL911 helped identify the domain as phishing, while Cloudflare marked it as risky and subsequently removed its DNS records.
Some users may have been affected before the site was fully secured. Across Protocol's outage impacted one of the largest cross-chain bridges by trading activity, ranking third in 30-day transfer volume, processing approximately $5.9 billion over the period. The incident did not affect third-party integrations and API users.
Written by urgent.news from Cointelegraph's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
This story
This is one outlet's version. Read the fullest account.
- Across Protocol warns users to avoid app amid reports of drained wallets cointelegraph.com
