✓ Verified by 2+ outlets
Across Protocol regains its domain after a registrar hijack sent users to a phishing site, promises to make victims whole
⚪NeutralA front-end hijack at one bridge with a pledge to repay users; it is a security incident for one project, not a protocol-level failure.News sentiment, not financial advice. It reflects the likely impact of this news, not a price prediction.
Summary
Cross-chain bridge Across Protocol said it has regained control of its across.to domain after attackers used a social engineering attack on its registrar, Namecheap, to take it over and replace the site with a phishing page, Cointelegraph and The Block reported.
Across said all systems are working normally again and that "all affected users will be made whole," with a full post-mortem to come, according to Cointelegraph.
The total losses and number of affected users have not been disclosed; Across had warned users on Tuesday to avoid its app amid reports of drained wallets, Cointelegraph reported.
Key facts
- Cointelegraph: Across said the attacker took control of the domain at about 18:45 UTC on Tuesday and the team was alerted within 15 minutes.
- Cointelegraph: security group SEAL911 helped flag the domain as phishing with major wallets, and Cloudflare marked it at risk and later removed its DNS records.
- Cointelegraph: Across said it recovered the domain with help from Namecheap founder Richard Kirkendall, and that third-party integrations and API users were unaffected.
- Cointelegraph, citing DefiLlama: Across ranked third among bridges by 30-day transfer volume, at about $5.9 billion.