Across Protocol recovered its domain after a Tuesday phishing attack caused user wallet drains, with the team promising full restitution as they investigate the scope of the incident.
Attackers hijacked the across.to domain via social engineering on Namecheap around 18:45 UTC on Tuesday and drained user wallets through a phishing site, with total losses still undisclosed. Security incidents that hit a protocol's users typically weigh on its token, though Across has since restored the domain, promises to make affected users whole, and says third-party integrations and API users were unaffected, which limits the damage.
Across Protocol has regained control of its across.to domain following a social engineering attack on registrar Namecheap that redirected users to a phishing site. While the team is working to make all affected users whole, the total number of victims and financial losses remain undisclosed. The bridge, which processed $5.9 billion in volume over the last 30 days, confirmed that third-party integrations and API users were not impacted by the breach.
A phishing attack that hijacked the protocol's website and drained some users' wallets raises safety and trust concerns around the bridge, which tends to pressure the protocol's token until losses are quantified and confidence is restored.
The attacker controlled the across.to domain from about 18:45 UTC Tuesday, but the team was alerted within 15 minutes and shut the site down; Cloudflare and wallet flagging limited exposure. Total losses and affected users have not been disclosed, and third-party integrations and API users were unaffected.