Across Says Domain Takeover May Have Exposed Users to Phishing

Across said attackers seized control of its across.to domain after a social-engineering attack targeted its registrar, Namecheap, potentially exposing visitors and prompting the protocol to take its website and API offline.

The incident began at about 1:45 p.m. ET Tuesday (18:45 UTC), when attackers gained control of the domain, Across said. The team received an alert within 15 minutes of the incident and began shutting down the site.

Across said some people who visited across.to may have been affected, while users of third-party integrations and the API were not. The protocol has not disclosed a loss amount, but said it plans to compensate all affected users and urged visitors to revoke related approvals through Revoke.cash.

SEAL911 flagged across.to as a phishing site, and Cloudflare then removed the domain’s DNS records, leaving the site inaccessible. Across plans to keep its front end and API offline until domain security is restored.

Across is a cross-chain protocol.