Across Suspends Website and API After Domain Hijacking, Promises Full Compensation

Across, a cross-chain protocol, has suspended its website frontend and API after attackers took control of its domain, saying some visitors to a phishing page may have been affected and promising full compensation.

The takeover occurred at about 1:45 p.m. ET Nov. 10 (18:45 UTC). Across said the attackers used social engineering targeting its domain registrar, Namecheap. The team received an alert and began disabling the site within 15 minutes.

SEAL911 helped major wallets flag the domain as a phishing site, while Cloudflare removed its DNS records. The phishing page was inaccessible by the time Across issued its announcement. The team said people who accessed the website before the attack, along with users of its API and third-party integrations, were not affected.

Across said users who reached the phishing page before it was blocked may have been affected. It pledged to compensate them in full and told them to use the wallet connected at the time to revoke permissions granted that day through Revoke.cash.

The frontend and API will remain offline until Across confirms the domain is secure. The team is investigating how the domain was taken over and plans to publish a review when it has more information.