Across Protocol Says Domain Takeover Forced Its Website Offline

Across Protocol said an attacker gained control of its website domain through a social-engineering attack targeting registrar Namecheap, forcing the decentralized finance platform offline as its team secured systems.

The team said the attack on Namecheap, which manages Across Protocol’s domain, enabled an unauthorized party to control its web address. It took the site offline within minutes to prevent further damage.

Cloudflare and SEAL911 helped flag the domain as risky and block a phishing site. The website remained offline while the team secured its systems and conducted a deeper investigation.

Users were told to avoid the website until further notice. People affected by the phishing incident were encouraged to revoke permissions granted to suspicious integrations.

Across Protocol is a decentralized finance platform focused on cross-chain transactions. The response centered on control of the domain, access to the site and efforts to block a phishing page while the team worked to secure its systems. The website remained offline as that security work continued.